CVE-2018-1000621

Mycroft AI mycroft-core version 18.2.8b and earlier contains a Incorrect Access Control vulnerability in Websocket configuration that can result in code execution. This impacts ONLY the Mycroft for Linux and "non-enclosure" installs - Mark 1 and Picroft unaffected. This attack appear to be...

CVE-2018-1000621

Summary: CVE-2018-1000621 affects Mycroft AI mycroft-core 18.2.8b and earlier on Linux/non-enclosure installs. The root cause is an Incorrect Access Control in the WebSocket configuration, enabling an attacker to achieve remote code execution via an unsecured WebSocket server. Impact is described...