CVE-2018-10088

CRITICALNuclei

xiongmaitech uc-httpd Improper Restriction of Operations within the Bounds of a Memory Buffer

Title source: VulnCheck
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2018-10088 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit and 1 Nuclei template.

Description

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jun 15, 2018 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Catalogued exploits
1
Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

uc-httpd

Browse xiongmaitech / uc-httpd
VulnCheckVersion data not supplied

Proofs of concept

1

Catalogued exploits

ExploitDBXiongMai uc-httpd 1.0.0 - Buffer OverflowExploitDB exploitby Andrew WatsonNot analyzed1 file
ExploitDB
PoC details

Nuclei templates

1
ProjectDiscoveryCRITICALXiongMai uc-httpd 1.0.0 - Buffer OverflowCVSS 9.8

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725.

Impact

Potential for remote code execution or denial of service when successfully exploited.

Remediation

Update to the latest version of uc-httpd or apply security patches provided by the vendor.

WeaknessesCWE-119
Authors0x_Akoko
Template tagscvecve2018xiongmaibuffer-overflowrcepassivevkevvuln
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:xiongmaitech:uc-httpd:1.0.0:*:*:*:*:*:*:*
Shodan: cpe:"cpe:2.3:a:xiongmaitech:uc-httpd"
https://nvd.nist.gov/vuln/detail/CVE-2018-10088 https://www.exploit-db.com/exploits/44864 https://github.com/bitfu/uc-httpd-1.0.0-buffer-overflow-exploit https://github.com/KostasEreksonas/Besder-6024PB-XMA501-ip-camera-security-investigation

Source: ProjectDiscovery

References

3