Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Weston Embedded records in CISA KEVNo Weston Embedded vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01746 · Published 2024-02-20 · No fix listed CWE-122
Priority HIGH 82
A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01672 · Published 2023-11-14 · No fix listed CWE-119
Priority HIGH 82
A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01672 · Published 2023-11-14 · No fix listed CWE-119
Priority HIGH 82
A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01778 · Published 2023-11-14 · No fix listed CWE-122
Priority HIGH 76
A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01475 · Published 2023-11-14 · No fix listed CWE-119
Priority HIGH 76
A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01688 · Published 2023-11-14 · No fix listed CWE-122
Priority HIGH 76
An authentication bypass vulnerability exists in the Authentication functionality of Weston Embedded uC-FTPs v 1.98.00.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01488 · Published 2023-05-10 · No fix listed CWE-303
Priority HIGH 74
A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01081 · Published 2024-02-20 · No fix listed CWE-415
Priority HIGH 66
An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01419 · Published 2023-05-10 · No fix listed CWE-823
Priority HIGH 66
An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0148 · Published 2023-05-10 · No fix listed CWE-823
Priority MEDIUM 44
An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01209 · Published 2023-11-14 · No fix listed CWE-119
Priority LOW 28
A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00811 · Published 2024-02-20 · No fix listed CWE-126
Priority LOW 28
A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00811 · Published 2024-02-20 · No fix listed CWE-126
THREATIST.IORead the docs