CVE-2018-1000804

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0370%

EPSS Percentile7.57th

Published2018年10月8日

Last Modified2024年11月21日

Vulnerability Description

contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL (Antelope Query Language) database engine that can result in Attacker can perform Remote Code Execution on device using Contiki-NG operating system. This attack appear to be exploitable via Attacker must be able to run malicious AQL code (e.g. via SQL-like Injection attack).

Affected Platforms (CPE)

💻

Contiki Ng

= 4.0

References & Advisories

🔗 https://github.com/contiki-ng/contiki-ng/issues/594

🔗 https://github.com/contiki-ng/contiki-ng/pull/624