5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
0.015 Low
EPSS
Percentile
87.0%
Cogent DataHub provided by Cogent Real-Time Systems Inc. contains a HTTP header injection vulnerability (also known as CRLF, carriage return line feed, injection vulnerability).
If a remote attacker sends a crafted HTTP header to a vulnerable system, forged information may be displayed on the user’s web browser or an HTTP response splitting attack may be conducted.
Update the Software
Update the software to the latest version according to the information provided by the developer.