VAR-201708-0127

Vulnerability from variot - Updated: 2025-04-20 23:16

WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation. WAGO IO 750-849 and WAGO IO 750-881 Contains vulnerabilities related to security features.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. WAGO IO PLCs 758-870 and 750-849 are bus editable logic controller modules from WAGO, Germany. There are security bypass vulnerabilities and privilege escalation vulnerabilities in WAGO IO PLC 758-870 and 750-849 versions that allow attackers to execute arbitrary code, bypass security restrictions, and perform unauthorized operations. A security vulnerability exists in WAGO IO 750-849 version 01.01.27 and WAGO IO 750-881 version 01.02.05. An attacker could use the default account to exploit this vulnerability to control and change the device

Show details on source website

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201708-0127",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "758-870",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "wago",
        "version": "01.01.27"
      },
      {
        "model": "750-849",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "wago",
        "version": "01.01.27"
      },
      {
        "model": "758-870",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "wago",
        "version": "01.02.05"
      },
      {
        "model": "i/o plc 750-849",
        "scope": null,
        "trust": 0.8,
        "vendor": "wago",
        "version": null
      },
      {
        "model": "i/o plc 750-881",
        "scope": null,
        "trust": 0.8,
        "vendor": "wago",
        "version": null
      },
      {
        "model": "io plc",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "wago",
        "version": "758-870"
      },
      {
        "model": "io plc",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "wago",
        "version": "750-849"
      },
      {
        "model": "i\\/o plc 758-870",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "wago",
        "version": "01.01.27"
      },
      {
        "model": "i\\/o plc 758-870",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "wago",
        "version": "01.02.05"
      },
      {
        "model": "i\\/o plc 750-849",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "wago",
        "version": "01.01.27"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wago i o plc 750 849",
        "version": "01.01.27"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wago i o plc 758 870",
        "version": "01.01.27"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "wago i o plc 758 870",
        "version": "01.02.05"
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "af646046-1130-4e49-a25e-dd43e2c49f38"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-05505"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007755"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201607-391"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6473"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/o:wago:wago_i%2Fo_plc_750-849_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:wago:wago_i%2Fo_plc_750-881_firmware",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007755"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Karn Ganeshen",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201607-391"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2015-6473",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2015-6473",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 1.9,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2016-05505",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "IVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "af646046-1130-4e49-a25e-dd43e2c49f38",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 0.2,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.9 [IVD]"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "VHN-84434",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 3.9,
            "id": "CVE-2015-6473",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.8,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2015-6473",
            "trust": 1.0,
            "value": "CRITICAL"
          },
          {
            "author": "NVD",
            "id": "CVE-2015-6473",
            "trust": 0.8,
            "value": "Critical"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2016-05505",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201607-391",
            "trust": 0.6,
            "value": "CRITICAL"
          },
          {
            "author": "IVD",
            "id": "af646046-1130-4e49-a25e-dd43e2c49f38",
            "trust": 0.2,
            "value": "CRITICAL"
          },
          {
            "author": "VULHUB",
            "id": "VHN-84434",
            "trust": 0.1,
            "value": "HIGH"
          },
          {
            "author": "VULMON",
            "id": "CVE-2015-6473",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "af646046-1130-4e49-a25e-dd43e2c49f38"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-05505"
      },
      {
        "db": "VULHUB",
        "id": "VHN-84434"
      },
      {
        "db": "VULMON",
        "id": "CVE-2015-6473"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007755"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201607-391"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6473"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation. WAGO IO 750-849 and WAGO IO 750-881 Contains vulnerabilities related to security features.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. WAGO IO PLCs 758-870 and 750-849 are bus editable logic controller modules from WAGO, Germany. There are security bypass vulnerabilities and privilege escalation vulnerabilities in WAGO IO PLC 758-870 and 750-849 versions that allow attackers to execute arbitrary code, bypass security restrictions, and perform unauthorized operations. A security vulnerability exists in WAGO IO 750-849 version 01.01.27 and WAGO IO 750-881 version 01.02.05. An attacker could use the default account to exploit this vulnerability to control and change the device",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2015-6473"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007755"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-05505"
      },
      {
        "db": "IVD",
        "id": "af646046-1130-4e49-a25e-dd43e2c49f38"
      },
      {
        "db": "VULHUB",
        "id": "VHN-84434"
      },
      {
        "db": "VULMON",
        "id": "CVE-2015-6473"
      }
    ],
    "trust": 2.52
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2015-6473",
        "trust": 3.4
      },
      {
        "db": "PACKETSTORM",
        "id": "136077",
        "trust": 2.6
      },
      {
        "db": "BID",
        "id": "84138",
        "trust": 2.4
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201607-391",
        "trust": 0.9
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-05505",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007755",
        "trust": 0.8
      },
      {
        "db": "IVD",
        "id": "AF646046-1130-4E49-A25E-DD43E2C49F38",
        "trust": 0.2
      },
      {
        "db": "VULHUB",
        "id": "VHN-84434",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2015-6473",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "af646046-1130-4e49-a25e-dd43e2c49f38"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-05505"
      },
      {
        "db": "VULHUB",
        "id": "VHN-84434"
      },
      {
        "db": "VULMON",
        "id": "CVE-2015-6473"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007755"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201607-391"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6473"
      }
    ]
  },
  "id": "VAR-201708-0127",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "IVD",
        "id": "af646046-1130-4e49-a25e-dd43e2c49f38"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-05505"
      },
      {
        "db": "VULHUB",
        "id": "VHN-84434"
      }
    ],
    "trust": 1.6970521357142858
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "af646046-1130-4e49-a25e-dd43e2c49f38"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-05505"
      }
    ]
  },
  "last_update_date": "2025-04-20T23:16:00.521000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "\u30c8\u30c3\u30d7\u30da\u30fc\u30b8",
        "trust": 0.8,
        "url": "http://global.wago.com/jp/"
      },
      {
        "title": "WAGO IO PLC has multiple bugs (CNVD-2016-05505) patch",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/79415"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-05505"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007755"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-254",
        "trust": 1.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-84434"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007755"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6473"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.7,
        "url": "http://packetstormsecurity.com/files/136077/wago-io-plc-758-870-750-849-credential-management-privilege-separation.html"
      },
      {
        "trust": 2.5,
        "url": "http://www.securityfocus.com/bid/84138"
      },
      {
        "trust": 1.8,
        "url": "http://seclists.org/fulldisclosure/2016/mar/4"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-6473"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-6473"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/254.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-05505"
      },
      {
        "db": "VULHUB",
        "id": "VHN-84434"
      },
      {
        "db": "VULMON",
        "id": "CVE-2015-6473"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007755"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201607-391"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6473"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "IVD",
        "id": "af646046-1130-4e49-a25e-dd43e2c49f38"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-05505"
      },
      {
        "db": "VULHUB",
        "id": "VHN-84434"
      },
      {
        "db": "VULMON",
        "id": "CVE-2015-6473"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007755"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201607-391"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6473"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2016-07-27T00:00:00",
        "db": "IVD",
        "id": "af646046-1130-4e49-a25e-dd43e2c49f38"
      },
      {
        "date": "2016-07-27T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2016-05505"
      },
      {
        "date": "2017-08-22T00:00:00",
        "db": "VULHUB",
        "id": "VHN-84434"
      },
      {
        "date": "2017-08-22T00:00:00",
        "db": "VULMON",
        "id": "CVE-2015-6473"
      },
      {
        "date": "2017-09-14T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-007755"
      },
      {
        "date": "2016-03-01T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201607-391"
      },
      {
        "date": "2017-08-22T18:29:00.263000",
        "db": "NVD",
        "id": "CVE-2015-6473"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2016-07-27T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2016-05505"
      },
      {
        "date": "2017-08-26T00:00:00",
        "db": "VULHUB",
        "id": "VHN-84434"
      },
      {
        "date": "2017-08-26T00:00:00",
        "db": "VULMON",
        "id": "CVE-2015-6473"
      },
      {
        "date": "2017-09-14T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-007755"
      },
      {
        "date": "2021-07-12T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201607-391"
      },
      {
        "date": "2025-04-20T01:37:25.860000",
        "db": "NVD",
        "id": "CVE-2015-6473"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201607-391"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "WAGO IO 750-849 and  WAGO IO 750-881 Vulnerabilities related to security functions",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007755"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "security feature problem",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201607-391"
      }
    ],
    "trust": 0.6
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…