Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

Priority LOW 28

A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00811 Published 2024-02-20 No fix listed CWE-126
Priority LOW 28

A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00811 Published 2024-02-20 No fix listed CWE-126
TI-2023-19938 CVE-2023-38562 · GHSA-43mr-mm46-m2qq

Double free in Weston Embedded uC-TCP-IP

Priority HIGH 74

A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01081 Published 2024-02-20 No fix listed CWE-415
Priority HIGH 82

A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01746 Published 2024-02-20 No fix listed CWE-122
Priority MEDIUM 44

An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01209 Published 2023-11-14 No fix listed CWE-119
Priority HIGH 76

A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01688 Published 2023-11-14 No fix listed CWE-122
Priority HIGH 76

A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01475 Published 2023-11-14 No fix listed CWE-119
Priority HIGH 82

A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01778 Published 2023-11-14 No fix listed CWE-122
Priority HIGH 82

A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01672 Published 2023-11-14 No fix listed CWE-119
Priority HIGH 82

A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01672 Published 2023-11-14 No fix listed CWE-119
Priority HIGH 76

An authentication bypass vulnerability exists in the Authentication functionality of Weston Embedded uC-FTPs v 1.98.00.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01488 Published 2023-05-10 No fix listed CWE-303
Priority HIGH 66

An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01419 Published 2023-05-10 No fix listed CWE-823
Priority HIGH 66

An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0148 Published 2023-05-10 No fix listed CWE-823