GCVE-110-CERTCC-2017-403768

Advisory PublishedCVSS 5.8/10

Vulnetix · Advisory published August 28, 2017

Akeo Consulting Rufus fails to securely check for and retrieve updates, which an allow an authenticated attacker to execute arbitrary code on a vulnerable system.

Download JSON Open in Console

Risk Scores

CVSS 2.0

5.8/10

Medium · AV:A/AC:L/Au:N/C:P/I:P/A:P

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population1d1_direct_report1

certcc-cvss-temporal-env

temporal_score5.2remediation_levelWreport_confidenceCenvironmental_score1.31313207639692target_distributionLenvironmental_vectorCDP:ND/TD:L/CR:ND/IR:ND/AR:ND