Lucene search
MitreCVE-2015-5474HistoryAug 13, 2015 - 2:59 p.m.
CVE-2015-5474
2015-08-1314:59:06
CWE-77
mitre
web.nvd.nist.gov
37
cve-2015-5474
bittorrent
utorrent
remote attackers
command injection
crafted url
nvd
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
Low
EPSS
0.289
Percentile
97.0%
BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (1) bittorrent or (2) magnet protocol.
Affected configurations
Node
bittorrentbittorrent
ORutorrentutorrent
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bittorrent | bittorrent | * | cpe:2.3:a:bittorrent:bittorrent:*:*:*:*:*:*:*:* |
| utorrent | utorrent | * | cpe:2.3:a:utorrent:utorrent:*:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2015-08-13 14:59:00
nvd
nvd
CVE-2015-5474
2015-08-13 14:59:06
cvelist
cvelist
CVE-2015-5474
2015-08-13 14:00:00
zdi
zdi
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
Low
EPSS
0.289
Percentile
97.0%
Related for CVE-2015-5474