Remote code execution

2018-12-2015:29:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.0%

JSON

MegaMek version < v0.45.1 contains a Other/Unknown vulnerability in Object Stream Connection that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.

CPENameOperatorVersion
megameklt0.45.1

CPE	Name	Operator	Version
	megamek	lt	0.45.1

References

0dd.zone/2018/10/28/megamek-Object-Injection/

github.com/MegaMek/megamek/issues/1162