5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
7 High
AI Score
Confidence
Low
0.015 Low
EPSS
Percentile
87.0%
CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
jvn.jp/en/jp/JVN63249231/index.html
jvndb.jvn.jp/jvndb/JVNDB-2012-000002
secunia.com/advisories/47496
secunia.com/advisories/47525
www.cogentdatahub.com/ReleaseNotes.html
www.securityfocus.com/bid/51375
www.us-cert.gov/control_systems/pdf/ICSA-12-016-01.pdf
exchange.xforce.ibmcloud.com/vulnerabilities/72306