MEDIUM🇬🇧 English

CVE-2020-37171

CVSS 6.7v4.0pub. 2026-02-07upd. 2026-02-19

TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy username configuration that allows local attackers to crash the application. Attackers can overwrite the username field with 10,000 bytes of arbitrary data to trigger an application crash and prevent normal program functionality.

oryginał EN
CVSS Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Raimersoft Tapinradio

    APP
    Raimersoft
    ≤ 2.12.3
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2020-37170MEDIUM6.7ten sam produkt

TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy address configuration th...

CVE-2020-36949MEDIUM6.7ten sam produkt

TapinRadio 2.13.7 contains a denial of service vulnerability in the application proxy settings that allows att...

CVE-2019-25583MEDIUM6.9ten sam vendor

RarmaRadio 2.72.3 contains a denial of service vulnerability in the Username field that allows local attackers...

CVE-2019-25584MEDIUM6.9ten sam vendor

RarmaRadio 2.72.3 contains a buffer overflow vulnerability in the Server field of the Network settings that al...