EMQ X Broker up to 4.2.7 memory allocation [CVE-2021-33175]

A vulnerability classified as problematic has been found in EMQ X Broker up to 4.2.7. Affected is an unknown code. Upgrading to version 4.2.8 eliminates this vulnerability.

Affected software

EMQ X versions prior to 4.2.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/RL:O/RC:C
  • Base Score: 8.6 (high)
  • Attack Vector (AV): Network
  • Attack Complexity (AC): Low

Mitigation

Upgrade to EMQ X version 4.2.8 or later.

Common Vulnerabilityies and Exposures

Contact us to get started

CVE-2023-28102 : DISCORDRB ENCODER.RB FILE OS COMMAND INJECTION

CVE-2023-28102 : DISCORDRB ENCODER.RB FILE OS COMMAND INJECTION

Description discordrb is an implementation of the Discord API using Ruby. In discordrb before commit `91e13043ffa` the `encoder.rb` file unsafely

CVE-2022-4126 : ABB RCCMD PRIOR 4.40 230207 HARD-CODED PASSWORD

CVE-2022-4126 : ABB RCCMD PRIOR 4.40 230207 HARD-CODED PASSWORD

Description Use of Default Password vulnerability in ABB RCCMD on Windows, Linux, MacOS allows Try Common or Default Usernames and

CVE-2023-25655 : BASERCMS UP TO 4.7.4 UNRESTRICTED UPLOAD

CVE-2023-25655 : BASERCMS UP TO 4.7.4 UNRESTRICTED UPLOAD

Description baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system