Vendors / X-plane Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 0
Exploited now X-plane records in CISA KEV No X-plane vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
X-Plane before 11.41 has multiple improper path validations that could allow reading and writing files from/to arbitrary paths (or a leak of OS credentials to a remote system) via crafted network packets.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02373 · Published 2020-03-30 · No fix listed CWE-78
Priority MEDIUM 46
X-Plane before 11.41 allows Arbitrary Memory Write via crafted network packets, which could cause a denial of service or arbitrary code execution.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02152 · Published 2020-03-30 · No fix listed CWE-787
Open these records in search → All records by CVSS severity
2 0 0 0 0
