Test Kennung:	1.3.6.1.4.1.25623.1.0.117538
Kategorie:	Web Servers
Titel:	Mongoose Web Server <= 6.8 Multiple Vulnerabilities
Zusammenfassung:	Mongoose Web Server is prone to multiple vulnerabilities.
Beschreibung:	Summary: Mongoose Web Server is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2017-2891: CGI Remote Code Execcution Vulnerability - CVE-2017-2892: MQTT Payload Length Remote Code Execution - CVE-2017-2893: MQTT SUBSCRIBE Command Denial Of Service - CVE-2017-2894: MQTT SUBSCRIBE Multiple Topics Remote Code Execution - CVE-2017-2895: MQTT SUBSCRIBE Topic Length Information Leak - CVE-2017-2909: DNS Query Compressed Name Pointer Denial Of Service - CVE-2017-2921: Websocket Protocol Packet Length Code Execution Vulnerability - CVE-2017-2922: Websocket Protocol Fragmented Packet Code Execution Vulnerability Affected Software/OS: Mongoose Web Server version 6.8 and prior. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-2891 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0398 Common Vulnerability Exposure (CVE) ID: CVE-2017-2892 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0399 Common Vulnerability Exposure (CVE) ID: CVE-2017-2893 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0400 Common Vulnerability Exposure (CVE) ID: CVE-2017-2894 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0401 Common Vulnerability Exposure (CVE) ID: CVE-2017-2895 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0402 Common Vulnerability Exposure (CVE) ID: CVE-2017-2909 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0416 Common Vulnerability Exposure (CVE) ID: CVE-2017-2921 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0428 Common Vulnerability Exposure (CVE) ID: CVE-2017-2922 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0429
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.