Xiongmaitech Uc-Httpd vulnerabilities

2 CVEs affecting Xiongmaitech Uc-Httpd, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-10088, published 2018-06-08.

More from Xiongmaitech.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-10088, published 2018-06-08. Critical severity, CVSS 9.8. EPSS: 39.7% chance of exploitation in the next 30 days. Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725.
• CVE-2017-7577, published 2017-04-07. Critical severity, CVSS 9.8. EPSS: 28.3% chance of exploitation in the next 30 days. XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request.