CVE-2018-13298

Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows man-in-the-middle…

synology·CWE-300·Published 2019-04-01

CVSS

—

EPSS

0.01

KEV

Exploits

cve.orgen

195 chars

Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors.

NVDen

195 chars

Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors.

NVDes

263 chars

Una vulnerabilidad de canal accesible por "non-endpoint" en la página de privacidad de Synology Android Moments, en versiones anteriores a la 1.2.3-199, permite a los atacantes Man-in-the-Middle (MitM) ejecutar código arbitrario mediante vectores sin especificar.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P
3.0	Primary	NVD	8.1	2.2	5.9	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H