Security Advisory

CVE-2018-1000621

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-07-09 20:00:00

Last updated 2024-09-17 00:56:16

Assigner mitre

State PUBLISHED

Description

Mycroft AI mycroft-core version 18.2.8b and earlier contains a Incorrect Access Control vulnerability in Websocket configuration that can result in code execution. This impacts ONLY the Mycroft for Linux and "non-enclosure" installs - Mark 1 and Picroft unaffected. This attack appear to be exploitable remote access to the unsecured websocket server. This vulnerability appears to have been fixed in No fix currently available.

← Browse all CVEs View on cve.org ↗