CVE-2008-7138

The Manager in Eye-Fi 1.1.2 generates predictable snonce values based on the time of day, which allows remote attackers to bypass authentication and upload arbitrary images by guessing the snonce.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
VendorProductVersion
eye.fieye-fi_manager
1.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/42719
http://secunia.com/advisories/29221
http://www.informit.com/articles/article.aspx?p=1177111&seqNum=2
http://www.securityfocus.com/archive/1/489045/100/0/threaded
http://www.securityfocus.com/bid/28085
http://osvdb.org/42719
http://secunia.com/advisories/29221
http://www.informit.com/articles/article.aspx?p=1177111&seqNum=2
http://www.securityfocus.com/archive/1/489045/100/0/threaded
http://www.securityfocus.com/bid/28085