7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.2 High
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.002 Low
EPSS
Percentile
61.6%
Software: erlang R16B
OS: Cobalt 7.9
CVE-ID: CVE-2011-0766
CVE-Crit: MEDIUM
CVE-DESC: The random number generator in the Crypto application before 2.0.2.2.2 and SSH before 2.0.5, which was used in the Erlang / OTP ssh library before R14B03, uses predictable starting numbers based on the current time, making it easy for remote attackers to guess the DSA host and SSH session keys.
CVE-STATUS: Default
CVE-REV: default
CVE-ID: CVE-2016-1000107
CVE-Crit: MEDIUM
CVE-DESC: inets in Erlang, possibly 22.1 and earlier, complies with section 4.1.18 of RFC 3875 and therefore does not protect applications from having untrusted client data in the HTTP_PROXY environment variable, which could allow remote attackers to redirect the applicationβs outgoing HTTP traffic to an arbitrary proxy server via a crafted Proxy header in the HTTP request, also known as the βhttpoxyβ problem.
CVE-STATUS: Default
CVE-REV: default
CVE-ID: CVE-2020-35733
CVE-Crit: HIGH
CVE-DESC: An issue was discovered in Erlang / OTP before 23.2.2. ssl 10.2 application accepts and trusts an invalid X.509 certificate chain to a trusted root certificate authority.
CVE-STATUS: default
CVE-REV: Default
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.2 High
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.002 Low
EPSS
Percentile
61.6%