CVE-2012-2429

2022-10-0316:15:36

icscert

www.cve.org

server

xarrow

invalid read

remote code execution

7.6 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.7%

JSON

The server in xArrow before 3.4.1 performs an invalid read operation, which allows remote attackers to execute arbitrary code via unspecified vectors.

References

www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf