CVE-2013-2600

HIGH EPSS 81.4%

Published Nov 1, 20196y ago · Modified Jun 16, 20262w ago

7.5 CVSS 3.1

High

Published Nov 1, 2019 6y ago

Last Modified Jun 16, 2026 2w ago

Description

MiniUPnPd has information disclosure use of snprintf()

Base Score

7.5

Exploitability

3.9

Impact

3.6

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality High

Integrity None

Availability None

EPSS Exploit Probability

81.4% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor Information Exposure

Vendor	Product	Version	Range
miniupnp_project	miniupnpd	1.8	any
debian	debian_linux	8.0	any
debian	debian_linux	9.0	any
debian	debian_linux	10.0	any

archives.neohapsis.com http://archives.neohapsis.com/archives/bugtraq/2013-07/0085.html

Broken Link
archives.neohapsis.com http://archives.neohapsis.com/archives/bugtraq/2013-07/0086.html

Broken Link
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/85774

Third Party AdvisoryVDB Entry
seclists.org https://seclists.org/bugtraq/2013/Jul/84

ExploitMailing ListThird Party Advisory
security-tracker.debian.org https://security-tracker.debian.org/tracker/CVE-2013-2600

Third Party Advisory

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.