CVE-2025-57784
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 1.8 / Impact: 1.4
Source: NVD
Description
Tomahawk auth timing attack due to usage of `strcmp` has been identified in Hiawatha webserver version 11.7 which allows a local attacker to access the management client.
Affected (1)
Products: Hiawatha Webserver: Hiawatha
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.7 |
References (1)
Source: cret@cert.org
Product
Timeline
No history available yet.