9.3crit
CVE-2008-40501 exploit
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to (1)…
Published 18 y ago · modified 4 mo ago · JSON
CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
6.7%
percentile 94%
Public exploits
1
Exploit-DB
Summary
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to (1) create and read arbitrary registry values via the RegistryValue method, and (2) read arbitrary files via the GetTextFile method.
Exploit prediction (EPSS)
6.75% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.
Exploits and detections
- EDB-6334 Friendly Technologies - Read/Write Registry/Read Files · remote · 2008-08-30
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
- CWE-20 Improper Input Validation
References
- exploit-db.com /exploits/6334 · exploit, x_refsource_EXPLOIT-DB, x_transferred
- securityfocus.com /bid/30939 · vdb-entry, x_refsource_BID, x_transferred
- secunia.com /advisories/31644 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/44787 · vdb-entry, x_refsource_XF, x_transferred
- securityreason.com /securityalert/4244 · third-party-advisory, x_refsource_SREASON, x_transferred
- securityfocus.com /bid/30940 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2008-4050
- NVD: CVE-2008-4050
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.