Resource exhaustion in Virginmedia Hub 3.0
CVE-2018-19037
On Virgin Media wireless router 3.0 hub devices, the web interface is vulnerable to denial of service. When POST requests are sent and keep the connection open, the router lags and becomes unusable to anyone currently using the web interface.
Vulnerability class: DoS (Denial of Service)
EPSS: 0.018 (75.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Virginmedia Hub_3.0
- Virginmedia Hub_3.0_firmware
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2018-19037?
- CVE-2018-19037 is a high-severity vulnerability in Virginmedia Hub 3.0, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2019-05-13.
- How severe is CVE-2018-19037?
- High severity. CVSS v3 base score is 7.5 out of 10.