Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-12784
HistoryAug 21, 2017 - 7:29 a.m.

Design/Logic Flaw

2017-08-2107:29:00
PRIOn knowledge base
www.prio-n.com
2

8.4 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.2%

In Youngzsoft CCFile (aka CC File Transfer) 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many ‘|’ characters. NOTE: some sources use this ID for a NoviWare issue, but the correct ID for that issue is CVE-2017-12787.

CPENameOperatorVersion
cc_file_transfereq3.6

8.4 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.2%