Code injection

2012-05-2519:55:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.8%

JSON

The server in xArrow before 3.4.1 performs an invalid read operation, which allows remote attackers to execute arbitrary code via unspecified vectors.

CPENameOperatorVersion
xarrowle3.4

CPE	Name	Operator	Version
	xarrow	le	3.4

References

www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf