« Volver al listado

CVE-2018-17614

Estado: ModificadaAlta (8.8)—

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Losant Arduino MQTT Client prior to V2.7. User interaction is not required to exploit this vulnerability. The specific flaw exists within the parsing of MQTT PUBLISH packets. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6436.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Losant — Arduino Mqtt Client

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-17614",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.8,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.5,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 8.8,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "zdi-disclosures@trendmicro.com",
      "affectedData": [
        {
          "vendor": "Losant",
          "product": "Losant Arduino MQTT Client",
          "versions": [
            {
              "status": "affected",
              "version": "prior to V2.7"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-11-13T21:29:00.293",
  "references": [
    {
      "url": "https://github.com/knolleary/pubsubclient/releases/tag/v2.7",
      "tags": [
        "Release Notes"
      ],
      "source": "zdi-disclosures@trendmicro.com"
    },
    {
      "url": "https://zerodayinitiative.com/advisories/ZDI-18-1337",
      "tags": [
        "Release Notes",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "zdi-disclosures@trendmicro.com"
    },
    {
      "url": "https://github.com/knolleary/pubsubclient/releases/tag/v2.7",
      "tags": [
        "Release Notes"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://zerodayinitiative.com/advisories/ZDI-18-1337",
      "tags": [
        "Release Notes",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "zdi-disclosures@trendmicro.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-121"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Losant Arduino MQTT Client prior to V2.7. User interaction is not required to exploit this vulnerability. The specific flaw exists within the parsing of MQTT PUBLISH packets. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6436."
    },
    {
      "lang": "es",
      "value": "Esta vulnerabilidad permite que los atacantes remotos ejecuten código arbitrario en instalaciones vulnerables del cliente Losant Arduino MQTT en versiones anteriores a la V2.7. No se requiere interacción del usuario para explotar esta vulnerabilidad. Este error en concreto existe en el análisis de paquetes MQTT PUBLISH. Este error deriva de la falta de validación adecuada de la longitud de los datos proporcionados por el usuario antes de copiarlos en un búfer basado en pila con un tamaño determinado. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del actual proceso. Anteriormente era ZDI-CAN-6436."
    }
  ],
  "lastModified": "2026-06-17T01:46:06.273",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:losant:arduino_mqtt_client:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2CE8B00-BF89-4956-BE49-572F7968487D",
              "versionEndExcluding": "2.7"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "zdi-disclosures@trendmicro.com"
}