Detections
Analytics

CVE-2011-4182

high

Description

Missing escaping of ESSID values in sysconfig of SUSE Linux Enterprise allows attackers controlling an access point to cause execute arbitrary code. Affected releases are sysconfig prior to 0.83.7-2.1.

References

https://www.suse.com/security/cve/CVE-2017-15710/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-4125

https://bugzilla.suse.com/show_bug.cgi?id=735394

Details

Source: Mitre, NVD

Published: 2018-06-12

Updated: 2023-11-07

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 8.1

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00574