Lucene search

[email protected]CVE-2020-5778

HistorySep 02, 2020 - 8:15 p.m.

CVE-2020-5778

2020-09-0220:15:10

CWE-119

CWE-20

[email protected]

web.nvd.nist.gov

trading technologies

messaging

cve-2020-5778

security flaw

remote attack

data validation

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

61.2%

JSON

A flaw exists in Trading Technologies Messaging 7.1.28.3 (ttmd.exe) due to improper validation of user-supplied data when processing a type 8 message sent to default TCP RequestPort 10200. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to terminate ttmd.exe.

Affected configurations

NVD

Node

tradingtechnologiestrading_technologies_messagingMatch7.1.28.3

CPENameOperatorVersion
tradingtechnologies:trading_technologies_messagingtradingtechnologies trading technologies messagingeq7.1.28.3

CPE	Name	Operator	Version
tradingtechnologies:trading_technologies_messaging	tradingtechnologies trading technologies messaging	eq	7.1.28.3

CNA Affected

[
  {
    "product": "Trading Technologies Messaging",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Trading Technologies Messaging 7.1.28.3"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2020-52

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

61.2%

JSON

Related for CVE-2020-5778

prion1 nvd1 cvelist1