Lucene search

K
cveDellCVE-2011-1744
HistoryAug 01, 2011 - 7:55 p.m.

CVE-2011-1744

2011-08-0119:55:01
CWE-264
dell
web.nvd.nist.gov
20
cve-2011-1744
emc captiva
einput
remote attack
file read
denial of service

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

AI Score

7

Confidence

High

EPSS

0.002

Percentile

57.0%

EMC Captiva eInput 2.1.1 before 2.1.1.37 does not restrict the origin of calls to ActiveX functions, which allows remote attackers to read arbitrary files or cause a denial of service via a crafted web site.

Affected configurations

Nvd
Node
emccaptiva_einputRange<2.1.1.37

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

AI Score

7

Confidence

High

EPSS

0.002

Percentile

57.0%

Related for CVE-2011-1744