vulnwire
2.8low

CVE-2017-20015

WEKA INTEREST Security Scanner LAN Viewer denial of service

Published 4 y ago · modified 4 mo ago · JSON

CVSS
2.8
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 18%
Public exploits
0
none known

A vulnerability, which was classified as problematic, was found in WEKA INTEREST Security Scanner up to 1.8. This affects an unknown part of the component LAN Viewer. The manipulation with an unknown input leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Exploit prediction (EPSS)

0.26% probability of exploitation in the next 30 days, higher than 18% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
CNA3.12.8CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
CNA3.12.8CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
NVD3.15.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD2.02.1AV:L/AC:L/Au:N/C:N/I:N/A:P

Affected products

  • WEKA INTEREST Security Scanner

Classification

Weakness
  • CWE-404 Improper Resource Shutdown or Release

References

  • vuldb.com /?id.101969 · x_refsource_MISC, x_transferred
  • computec.ch /news.php?item.117 · x_refsource_MISC, x_transferred
  • vuldb.com /?id.101973 · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.