Lucene search

K
nvd[email protected]NVD:CVE-2009-0120
HistoryJan 15, 2009 - 12:30 a.m.

CVE-2009-0120

2009-01-1500:30:00
CWE-20
web.nvd.nist.gov
5

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.02

Percentile

88.9%

The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote attackers to cause a denial of service (device reboot) by sending data over an established SSL connection, as demonstrated by the abc\r\n\r\n string data.

Affected configurations

Nvd
Node
ibmwebsphere_datapower_xml_security_gateway_xs40Match3.6.1.5
VendorProductVersionCPE
ibmwebsphere_datapower_xml_security_gateway_xs403.6.1.5cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.6.1.5:*:*:*:*:*:*:*

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.02

Percentile

88.9%

Related for NVD:CVE-2009-0120