Lucene search

K
nvd[email protected]NVD:CVE-2008-4050
HistorySep 11, 2008 - 9:06 p.m.

CVE-2008-4050

2008-09-1121:06:48
CWE-20
web.nvd.nist.gov
2

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.079

Percentile

94.3%

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to (1) create and read arbitrary registry values via the RegistryValue method, and (2) read arbitrary files via the GetTextFile method.

Affected configurations

Nvd
Node
friendly_technologiesfriendly_pppoe_clientMatch3.0.0.57
VendorProductVersionCPE
friendly_technologiesfriendly_pppoe_client3.0.0.57cpe:2.3:a:friendly_technologies:friendly_pppoe_client:3.0.0.57:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.079

Percentile

94.3%

Related for NVD:CVE-2008-4050