Lucene search
HistoryMar 10, 2010 - 8:13 p.m.
CVE-2010-0418
cve-2010-0418
chumby one
remote code execution
web interface
security vulnerability
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.9 High
AI Score
Confidence
Low
0.016 Low
EPSS
Percentile
87.4%
The web interface in chumby one before 1.0.4 and chumby classic before 1.7.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a request.
Affected configurations
Node
chumbychumby_oneRange≤1.0.3
ORchumbychumby_oneMatch1.0.2
Node
chumbychumby_classicRange≤1.7.1
ORchumbychumby_classicMatch0.9
ORchumbychumby_classicMatch1.1
ORchumbychumby_classicMatch1.2
ORchumbychumby_classicMatch1.4
ORchumbychumby_classicMatch1.5
ORchumbychumby_classicMatch1.6
ORchumbychumby_classicMatch1.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| chumby:chumby_one | chumby chumby one | le | 1.0.3 |
| chumby:chumby_one | chumby chumby one | eq | 1.0.2 |
Related
cvelist
cvelist
CVE-2010-0418
2010-03-09 19:00:00
prion
prion
Cross site request forgery (csrf)
2010-03-10 20:13:00
nvd
nvd
CVE-2010-0418
2010-03-10 20:13:03
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.9 High
AI Score
Confidence
Low
0.016 Low
EPSS
Percentile
87.4%
Related for CVE-2010-0418