CVE-2008-7138 in Eye-Fi Manager

Riassunto

di MITRE

The Manager in Eye-Fi 1.1.2 generates predictable snonce values based on the time of day, which allows remote attackers to bypass authentication and upload arbitrary images by guessing the snonce.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 01/09/2009
• Divulgazione: 01/09/2009
• Moderazione: accettato
• Voce: VDB-49758
• CPE: pronto
• CWE: CWE-310 (confermato)
• CVSS: 5.3 (VulDB)
• EPSS: 0.01295
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-7138
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-7138
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-7138/