VAR-200408-0052
Vulnerability from variot - Updated: 2025-04-03 19:55Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections. The ability to predict TCP sequence numbers may allow a remote attacker to inject packets into a vulnerable data stream, for example the telnet service on the affected modem. Remote attackers can use this vulnerability to carry out TCP communication forgery attacks. The TCP initialization sequence number of the device can be guessed, which can cause the attacker to fail the ADSL Modem communication by forging the communication, or hijack the device. BACKGROUND
The Thompson (formerly Alcatel) SpeedTouch is an ADSL router for home and business providing a continuously available, "always on," connection. More information about the product can be found at http://www.speedtouchdsl.com/.
II.
The problem specifically exists due to the predictable nature of the TCP Initial Sequence Number (ISN) generator on the device. The following sanitized tcpdump output demonstrates the existence of the vulnerability when 10 consecutive TCP connection requests are generated for the telnet server (port 23) on the Thompson device:
48.3 host_a.1096 > host_b.telnet: S 48.3 host_b.telnet > host_a.1096: S 4081040897:4081040897(0) ack 48.3 host_a.1096 > host_b.telnet: R 48.4 host_a.1096 > host_b.telnet: S 48.4 host_b.telnet > host_a.1096: S 4081104897:4081104897(0) ack 48.4 host_a.1096 > host_b.telnet: R 48.6 host_a.1096 > host_b.telnet: S 48.6 host_b.telnet > host_a.1096: S 4081232897:4081232897(0) ack 48.6 host_a.1096 > host_b.telnet: R 48.7 host_a.1096 > host_b.telnet: S 48.7 host_b.telnet > host_a.1096: S 4081296897:4081296897(0) ack 48.7 host_a.1096 > host_b.telnet: R 48.9 host_a.1096 > host_b.telnet: S 48.9 host_b.telnet > host_a.1096: S 4081360897:4081360897(0) ack 48.9 host_a.1096 > host_b.telnet: R 49.0 host_a.1096 > host_b.telnet: S 49.0 host_b.telnet > host_a.1096: S 4081488897:4081488897(0) ack 49.0 host_a.1096 > host_b.telnet: R 49.2 host_a.1096 > host_b.telnet: S 49.2 host_b.telnet > host_a.1096: S 4081552897:4081552897(0) ack 49.2 host_a.1096 > host_b.telnet: R 49.3 host_a.1096 > host_b.telnet: S 49.3 host_b.telnet > host_a.1096: S 4081616897:4081616897(0) ack 49.3 host_a.1096 > host_b.telnet: R 49.5 host_a.1096 > host_b.telnet: S 49.5 host_b.telnet > host_a.1096: S 4081744897:4081744897(0) ack 49.5 host_a.1096 > host_b.telnet: R 49.6 host_a.1096 > host_b.telnet: S 49.6 host_b.telnet > host_a.1096: S 4081808897:4081808897(0) ack 49.6 host_a.1096 > host_b.telnet: R
In the above example, host_a is the querying host and host_b is the Thompson device. A clear pattern in ISN generation can be seen as the value increases by approximately 64,000 each millisecond.
III. ANALYSIS
Successful exploitation of weak ISNs for the purpose of connection spoofing is not a trivial task. Successful exploitation allows an attacker to generate traffic on behalf of the affected device. Such an ability is most dangerous when trust paths exist between the affected device and another remote system.
IV. DETECTION
iDEFENSE has verified the existence of this vulnerability in Thompson's SpeedTouch firmware version GV8BAA3.270 (1003825). It is suspected that earlier versions are susceptible to exploitation as well.
V. WORKAROUNDS
Untrusted traffic should be filtered at the network perimeter.
VI. CVE INFORMATION
The Common Vulnerabilities and Exposures (CVE) project has assigned the name CAN-2004-0641 to this issue. This is a candidate for inclusion in the CVE list (http://cve.mitre.org), which standardizes names for security problems.
VII. DISCLOSURE TIMELINE
06/08/04 Initial vendor contact - no response 06/08/04 iDEFENSE clients notified 06/18/04 Secondary vendor contact - no response 08/05/04 Public disclosure
VIII. CREDIT
The discoverer wishes to remain anonymous.
Get paid for vulnerability research http://www.idefense.com/poi/teams/vcp.jsp
IX. LEGAL NOTICES
Copyright © 2004 iDEFENSE, Inc.
Permission is granted for the redistribution of this alert electronically. It may not be edited in any way without the express written consent of iDEFENSE. If you wish to reprint the whole or any part of this alert in any other medium other than electronically, please email customerservice@idefense.com for permission.
Disclaimer: The information in the advisory is believed to be accurate at the time of publishing based on currently available information. Use of the information constitutes acceptance for use in an AS IS condition. There are no warranties with regard to this information. Neither the author nor the publisher accepts any liability for any direct, indirect, or consequential loss or damage arising from use of, or reliance on, this information
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200408-0052",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "speedtouch",
"scope": "eq",
"trust": 1.6,
"vendor": "thomson",
"version": "510_adsl_router"
},
{
"model": "speedtouch adsl router",
"scope": "eq",
"trust": 0.3,
"vendor": "thomson",
"version": "510"
}
],
"sources": [
{
"db": "BID",
"id": "10881"
},
{
"db": "CNNVD",
"id": "CNNVD-200408-015"
},
{
"db": "NVD",
"id": "CVE-2004-0641"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "iDEFENSE",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200408-015"
}
],
"trust": 0.6
},
"cve": "CVE-2004-0641",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2004-0641",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-9071",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2004-0641",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-200408-015",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-9071",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-9071"
},
{
"db": "CNNVD",
"id": "CNNVD-200408-015"
},
{
"db": "NVD",
"id": "CVE-2004-0641"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections. The ability to predict TCP sequence numbers may allow a remote attacker to inject packets into a vulnerable data stream, for example the telnet service on the affected modem. Remote attackers can use this vulnerability to carry out TCP communication forgery attacks. The TCP initialization sequence number of the device can be guessed, which can cause the attacker to fail the ADSL Modem communication by forging the communication, or hijack the device. BACKGROUND\n\nThe Thompson (formerly Alcatel) SpeedTouch is an ADSL router for home\nand business providing a continuously available, \"always on,\"\nconnection. More information about the product can be found at\nhttp://www.speedtouchdsl.com/. \n\nII. \n\nThe problem specifically exists due to the predictable nature of the TCP\nInitial Sequence Number (ISN) generator on the device. The following\nsanitized tcpdump output demonstrates the existence of the vulnerability\nwhen 10 consecutive TCP connection requests are generated for the telnet\nserver (port 23) on the Thompson device:\n\n48.3 host_a.1096 \u003e host_b.telnet: S\n48.3 host_b.telnet \u003e host_a.1096: S 4081040897:4081040897(0) ack\n48.3 host_a.1096 \u003e host_b.telnet: R\n48.4 host_a.1096 \u003e host_b.telnet: S\n48.4 host_b.telnet \u003e host_a.1096: S 4081104897:4081104897(0) ack\n48.4 host_a.1096 \u003e host_b.telnet: R\n48.6 host_a.1096 \u003e host_b.telnet: S\n48.6 host_b.telnet \u003e host_a.1096: S 4081232897:4081232897(0) ack\n48.6 host_a.1096 \u003e host_b.telnet: R\n48.7 host_a.1096 \u003e host_b.telnet: S\n48.7 host_b.telnet \u003e host_a.1096: S 4081296897:4081296897(0) ack\n48.7 host_a.1096 \u003e host_b.telnet: R\n48.9 host_a.1096 \u003e host_b.telnet: S\n48.9 host_b.telnet \u003e host_a.1096: S 4081360897:4081360897(0) ack\n48.9 host_a.1096 \u003e host_b.telnet: R\n49.0 host_a.1096 \u003e host_b.telnet: S\n49.0 host_b.telnet \u003e host_a.1096: S 4081488897:4081488897(0) ack\n49.0 host_a.1096 \u003e host_b.telnet: R\n49.2 host_a.1096 \u003e host_b.telnet: S\n49.2 host_b.telnet \u003e host_a.1096: S 4081552897:4081552897(0) ack\n49.2 host_a.1096 \u003e host_b.telnet: R\n49.3 host_a.1096 \u003e host_b.telnet: S\n49.3 host_b.telnet \u003e host_a.1096: S 4081616897:4081616897(0) ack\n49.3 host_a.1096 \u003e host_b.telnet: R\n49.5 host_a.1096 \u003e host_b.telnet: S\n49.5 host_b.telnet \u003e host_a.1096: S 4081744897:4081744897(0) ack\n49.5 host_a.1096 \u003e host_b.telnet: R\n49.6 host_a.1096 \u003e host_b.telnet: S\n49.6 host_b.telnet \u003e host_a.1096: S 4081808897:4081808897(0) ack\n49.6 host_a.1096 \u003e host_b.telnet: R\n\nIn the above example, host_a is the querying host and host_b is the\nThompson device. A clear pattern in ISN generation can be seen as the\nvalue increases by approximately 64,000 each millisecond. \n\nIII. ANALYSIS\n\nSuccessful exploitation of weak ISNs for the purpose of connection\nspoofing is not a trivial task. Successful exploitation allows an\nattacker to generate traffic on behalf of the affected device. Such an\nability is most dangerous when trust paths exist between the affected\ndevice and another remote system. \n\nIV. DETECTION\n\niDEFENSE has verified the existence of this vulnerability in Thompson\u0027s\nSpeedTouch firmware version GV8BAA3.270 (1003825). It is suspected that\nearlier versions are susceptible to exploitation as well. \n\nV. WORKAROUNDS\n\nUntrusted traffic should be filtered at the network perimeter. \n\nVI. CVE INFORMATION\n\nThe Common Vulnerabilities and Exposures (CVE) project has assigned the\nname CAN-2004-0641 to this issue. This is a candidate for inclusion in\nthe CVE list (http://cve.mitre.org), which standardizes names for\nsecurity problems. \n\nVII. DISCLOSURE TIMELINE\n\n06/08/04 Initial vendor contact - no response\n06/08/04 iDEFENSE clients notified\n06/18/04 Secondary vendor contact - no response\n08/05/04 Public disclosure\n\nVIII. CREDIT\n\nThe discoverer wishes to remain anonymous. \n\nGet paid for vulnerability research\nhttp://www.idefense.com/poi/teams/vcp.jsp\n\nIX. LEGAL NOTICES\n\nCopyright \u00a9 2004 iDEFENSE, Inc. \n\nPermission is granted for the redistribution of this alert\nelectronically. It may not be edited in any way without the express\nwritten consent of iDEFENSE. If you wish to reprint the whole or any\npart of this alert in any other medium other than electronically, please\nemail customerservice@idefense.com for permission. \n\nDisclaimer: The information in the advisory is believed to be accurate\nat the time of publishing based on currently available information. Use\nof the information constitutes acceptance for use in an AS IS condition. \nThere are no warranties with regard to this information. Neither the\nauthor nor the publisher accepts any liability for any direct, indirect,\nor consequential loss or damage arising from use of, or reliance on,\nthis information",
"sources": [
{
"db": "NVD",
"id": "CVE-2004-0641"
},
{
"db": "BID",
"id": "10881"
},
{
"db": "VULHUB",
"id": "VHN-9071"
},
{
"db": "PACKETSTORM",
"id": "33975"
}
],
"trust": 1.35
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-9071",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-9071"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2004-0641",
"trust": 2.1
},
{
"db": "BID",
"id": "10881",
"trust": 2.0
},
{
"db": "SECUNIA",
"id": "12238",
"trust": 1.7
},
{
"db": "AUSCERT",
"id": "ESB-2004.0504",
"trust": 1.7
},
{
"db": "CNNVD",
"id": "CNNVD-200408-015",
"trust": 0.7
},
{
"db": "IDEFENSE",
"id": "20040805 THOMPSON SPEEDTOUCH HOME ADSL MODEM PREDICTABLE TCP ISN GENERATION",
"trust": 0.6
},
{
"db": "XF",
"id": "16919",
"trust": 0.6
},
{
"db": "PACKETSTORM",
"id": "33975",
"trust": 0.2
},
{
"db": "EXPLOIT-DB",
"id": "19522",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-9071",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-9071"
},
{
"db": "BID",
"id": "10881"
},
{
"db": "PACKETSTORM",
"id": "33975"
},
{
"db": "CNNVD",
"id": "CNNVD-200408-015"
},
{
"db": "NVD",
"id": "CVE-2004-0641"
}
]
},
"id": "VAR-200408-0052",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-9071"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-03T19:55:42.900000Z",
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2004-0641"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "http://www.auscert.org.au/render.html?it=4299"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/10881"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/12238/"
},
{
"trust": 1.6,
"url": "http://www.idefense.com/application/poi/display?id=120\u0026type=vulnerabilities\u0026flashstatus=true"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16919"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/16919"
},
{
"trust": 0.3,
"url": "http://www.idefense.com/application/poi/display?id=120\u0026type=vulnerabilities"
},
{
"trust": 0.3,
"url": "http://www.speedtouch.com/"
},
{
"trust": 0.1,
"url": "http://www.idefense.com/application/poi/display?id=120\u0026amp;type=vulnerabilities\u0026amp;flashstatus=true"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org),"
},
{
"trust": 0.1,
"url": "http://www.idefense.com/poi/teams/vcp.jsp"
},
{
"trust": 0.1,
"url": "http://www.speedtouchdsl.com/."
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2004-0641"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-9071"
},
{
"db": "BID",
"id": "10881"
},
{
"db": "PACKETSTORM",
"id": "33975"
},
{
"db": "CNNVD",
"id": "CNNVD-200408-015"
},
{
"db": "NVD",
"id": "CVE-2004-0641"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-9071"
},
{
"db": "BID",
"id": "10881"
},
{
"db": "PACKETSTORM",
"id": "33975"
},
{
"db": "CNNVD",
"id": "CNNVD-200408-015"
},
{
"db": "NVD",
"id": "CVE-2004-0641"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2004-08-05T00:00:00",
"db": "VULHUB",
"id": "VHN-9071"
},
{
"date": "2004-08-05T00:00:00",
"db": "BID",
"id": "10881"
},
{
"date": "2004-08-06T18:58:41",
"db": "PACKETSTORM",
"id": "33975"
},
{
"date": "2004-08-05T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200408-015"
},
{
"date": "2004-08-05T04:00:00",
"db": "NVD",
"id": "CVE-2004-0641"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-07-11T00:00:00",
"db": "VULHUB",
"id": "VHN-9071"
},
{
"date": "2009-07-12T06:16:00",
"db": "BID",
"id": "10881"
},
{
"date": "2005-10-20T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200408-015"
},
{
"date": "2025-04-03T01:03:51.193000",
"db": "NVD",
"id": "CVE-2004-0641"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "PACKETSTORM",
"id": "33975"
},
{
"db": "CNNVD",
"id": "CNNVD-200408-015"
}
],
"trust": 0.7
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Thomson SpeedTouch Home ADSL Modem predictable TCP Serial number vulnerability",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200408-015"
}
],
"trust": 0.6
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Design Error",
"sources": [
{
"db": "BID",
"id": "10881"
},
{
"db": "CNNVD",
"id": "CNNVD-200408-015"
}
],
"trust": 0.9
}
}
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.