« Volver al listado

CVE-2008-6737

Estado: ModificadaAlta (7.8)—

Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a previous join packet, which causes Crysis to send a disconnect packet that includes unrelated log information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

EA — Crysis

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-6737",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-04-21T18:30:00.343",
  "references": [
    {
      "url": "http://aluigi.altervista.org/adv/crysislog-adv.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/46260",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/30706",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/29720",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43087",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://aluigi.altervista.org/adv/crysislog-adv.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/46260",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/30706",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/29720",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43087",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a previous join packet, which causes Crysis to send a disconnect packet that includes unrelated log information."
    },
    {
      "lang": "es",
      "value": "Crysis v1.21 y anteriores permite a atacantes remotos obtener información sensible del jugador como su IP mediante el envío de un paquete \"keyexchange\" sin un paquete previo \"join\", lo que produce que Crysis envíe un paquete desconectado incluyendo información del log no relacionada."
    }
  ],
  "lastModified": "2026-06-16T23:02:52.473",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ea:crysis:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6727C27C-0A21-40BB-AE96-8F056CE6FA8F",
              "versionEndIncluding": "1.21"
            },
            {
              "criteria": "cpe:2.3:a:ea:crysis:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "359F6C10-9244-4656-96C0-C4880D925A97"
            },
            {
              "criteria": "cpe:2.3:a:ea:crysis:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4799ADB-A7EA-4044-AB66-9DC9330BC2BF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}