CVE-2009-3092

{"id": "CVE-2009-3092", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": true, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-09-08T18:30:00.610", "references": [{"url": "http://intevydis.com/vd-list.shtml", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/36439", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/36236", "source": "cve@mitre.org"}, {"url": "http://intevydis.com/vd-list.shtml", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/36439", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/36236", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow on the ASUS WL-500W wireless router has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en el router wireless ASUS WL-500W tiene un impacto y vectores de ataque desconocidos, como se ha demostrado por cierto m\u00f3dulo en VulnDisco Pack Professional v8.11. NOTA: hasta el 3-3-2009, esta divulgaci\u00f3n no ten\u00eda informaci\u00f3n para su puesta en pr\u00e1ctica. En cualquier caso, como el autor de VulnDisco Pack es un investigador reputado, se ha asignado un identificador CVE con fines de seguimiento."}], "lastModified": "2024-11-21T01:06:31.167", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:asus:asus_wl-500w:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C349BDCD-F00C-4A19-BAD0-65A87FAE3A71"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}