CVE-2008-4050
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to (1) create and read arbitrary registry values via the RegistryValue method, and (2) read arbitrary files via the…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (6.75%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to (1) create and read arbitrary registry values via the RegistryValue method, and (2) read arbitrary files via the GetTextFile method.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 6.75% probability · 94th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- friendly technologies/friendly pppoe client
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/31644Vendor Advisory
- http://securityreason.com/securityalert/4244
- http://www.securityfocus.com/bid/30939
- http://www.securityfocus.com/bid/30940Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44787
- https://www.exploit-db.com/exploits/6334
- http://secunia.com/advisories/31644Vendor Advisory
- http://securityreason.com/securityalert/4244
- http://www.securityfocus.com/bid/30939
- http://www.securityfocus.com/bid/30940Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44787
- https://www.exploit-db.com/exploits/6334
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.