CVE-2009-0120
IBM Websphere DataPower XML Security Gateway 3.6.1 XS40 - Remote Denial of Service
Severity Score
7.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote attackers to cause a denial of service (device reboot) by sending data over an established SSL connection, as demonstrated by the abc\r
\r
string data.
El IBM WebSphere DataPower XML Security Gateway XS40 con firmware 3.6.1.5, permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) mediante el envío de información sobre una conexión SSL, como se ha demostrado mediante la cadena de datos abc\r
\r
.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-01-08 First Exploit
- 2009-01-14 CVE Reserved
- 2009-01-15 CVE Published
- 2023-08-25 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-20: Improper Input Validation
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://securityreason.com/securityalert/4911 | Third Party Advisory | |
| http://www.securityfocus.com/archive/1/499870/100/0/threaded | Mailing List | |
| http://www.securitytracker.com/id?1021547 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2009/0111 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/32712 | 2009-01-08 | |
| http://www.securityfocus.com/bid/33169 | 2024-08-07 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Websphere Datapower Xml Security Gateway Xs40 Search vendor "Ibm" for product "Websphere Datapower Xml Security Gateway Xs40" | 3.6.1.5 Search vendor "Ibm" for product "Websphere Datapower Xml Security Gateway Xs40" and version "3.6.1.5" | - |
Affected
| ||||||