← Back

CVE-2018-25043

nvd nist
Published: Jun 17, 2022Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

A vulnerability classified as critical was found in uTorrent. This vulnerability affects unknown code of the component PRNG. The manipulation leads to weak authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.

Affected (1)

Products: Bittorrent: Utorrent
Bittorrent
1 product
Utorrent
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Utorrent
All versions

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (6)

Source: cna@vuldb.com
Third Party Advisory
Source: cna@vuldb.com
ExploitIssue TrackingMailing ListThird Party Advisory
Source: cna@vuldb.com
ExploitPermissions RequiredThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue TrackingMailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPermissions RequiredThird Party AdvisoryVDB Entry

Timeline

No history available yet.