Lucene search

K
cve[email protected]CVE-2009-1666
HistoryOct 03, 2022 - 4:24 p.m.

CVE-2009-1666

2022-10-0316:24:00
web.nvd.nist.gov
18
cve
2009
1666
cyclomedia
cycloscopelite
vulnerabilities
remote attack
arbitrary code
improper dereferencing
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.8%

Multiple unspecified vulnerabilities in CycloMedia CycloScopeLite 2.50.3.0 allow remote attackers to execute arbitrary code via the ReturnConnection method in (1) CM_ADOConnection.dll, (2) CM_AddressInfoDBC.dll, and (3) CM_RecordingLocationDBC.dll, related to improper dereferencing. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD
Node
cyclomediacycloscopeliteMatch2.50.3.0

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.8%

Related for CVE-2009-1666