Vulnerability in Accoria Rock Web Server

CVE-2010-2271

Format string vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to have an unspecified impact via format string specifiers in the path (aka Password File) parameter.

EPSS: 0.014 (69.9th percentile) — read the EPSS interpretation.

Affected products

Accoria Rock_web_server — versions 1.4.7
N/a — versions n/a

Weakness classification (CWE)

CWE-134 — Use of Externally-Controlled Format String

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (x_refsource_CERT-VN, US Government Resource, third-party-advisory)