CVE-2016-1138

Medium

4.7/10

Summary

CRLF injection vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to inject arbitrary HTTP headers via unspecified vectors.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: LOW
Scope: CHANGED
User Interaction: REQUIRED
Privileges Required: NONE
Confidentiality Impact: NONE
Availability Impact: NONE

References

Advisory Timeline

Published Jan 30, 2016

CVE-2016-1138

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS