Approved changes feed: RSS · Atom
cpe:2.3:a:uci:idol2:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Uci (65f69259-e185-52e7-93e2-97f0c7210aa7) |
|---|---|
| Product | Idol2 (d375e2a8-8b06-5661-be25-df43bfb3e592) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-45169 |
vulnerable | 2026-06-08 06:45:55.483664 |
Details available
An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code execution via the \xB0\x00\x3c byte sequence.
Published: 2024-08-22T00:00:00.000Z
Updated: 2024-08-22T14:37:58.392Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45168 |
vulnerable | 2026-06-08 06:45:55.483190 |
Details available
An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is transferred over a raw socket without any authentication mechanism. Thus, communication endpoints are not verifiable.
Published: 2024-08-22T00:00:00.000Z
Updated: 2024-08-22T13:36:52.712Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45167 |
vulnerable | 2026-06-08 06:45:55.482811 |
Details available
An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code execution. A certain XmlMessage document causes 100% CPU consumption.
Published: 2024-08-22T00:00:00.000Z
Updated: 2024-08-22T20:02:43.672Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45166 |
vulnerable | 2026-06-08 06:45:55.482179 |
Details available
An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code execution. There is an access violation and EIP overwrite after five logins.
Published: 2024-08-22T00:00:00.000Z
Updated: 2024-08-22T13:18:38.592Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45165 |
vulnerable | 2026-06-08 06:45:55.480984 |
Details available
An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is sent between client and server with encryption. However, the key is derived from the string "(c)2007 UCI Software GmbH B.Boll" (without quotes). The key is both static and hardcoded. With access to messages, this results in message decryption and encryption by an attacker. Thus, it enables passive and active man-in-the-middle attacks.
Published: 2024-08-22T00:00:00.000Z
Updated: 2024-10-31T18:17:04.946Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.