GCVE-110-CERTCC-2015-794095

Advisory PublishedCVSS 6.2/10

Vulnetix · Advisory published March 10, 2015

Telerik Analytics Monitor Library is a third-party application analytics service that collects detailed application metrics for vendors. Some versions of the Telerik library allow DLL hijacking, allowing an attacker to load malicious code in the context of the Telerik-based application.

Download JSON Open in Console

Risk Scores

CVSS 2.0

6.2/10

Medium · AV:L/AC:H/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact2d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score4.9remediation_levelOFreport_confidenceCenvironmental_score1.215149802048target_distributionLenvironmental_vectorCDP:ND/TD:L/CR:ND/IR:ND/AR:ND