Unscored severity · published Sep 8, 2009
CVE-2008-7173
The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial…
–
CVSS
4.7%
EPSS
No
On KEV
Description
The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service (physical damage), modify coffee settings, and possibly execute code via a crafted request. NOTE: this issue is being included in CVE because the denial of service may include financial loss or water damage.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IC
Internet Connectivity Kit · Juracapecoffee
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-7173
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-7173
attrition.org
http://attrition.org/pipermail/vim/2008-June/002002.html
news.cnet.com
http://news.cnet.com/8301-10784_3-9970757-7.html
osvdb.org
http://osvdb.org/46407
www.securityfocus.com
http://www.securityfocus.com/archive/1/493387/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/493433/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/493440/100/0/threaded
More from Internet Connectivity Kit
–
CVE-2008-7174
Multiple buffer overflows in the Jura Internet Connection Kit for the Jura Impressa F90 coffee maker allow remote attackers to cause a denial of service (crash) and possibly…