7.8
CVSSv2

CVE-2009-0120

Published: 15/01/2009 Updated: 11/10/2018
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 785
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote malicious users to cause a denial of service (device reboot) by sending data over an established SSL connection, as demonstrated by the abc\r\n\r\n string data.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm websphere datapower xml security gateway xs40 3.6.1.5

Exploits

source: wwwsecurityfocuscom/bid/33169/info IBM WebSphere DataPower XML Security Gateway XS40 is prone to a remote denial-of-service vulnerability because it fails to handle user-supplied input Remote attackers can exploit this issue to cause the device to reboot, denying service to legitimate users WebSphere DataPower XML Security Gat ...