Vulnerability Intelligence Report
CVE-2018-15504
An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL pointer dereference, as demonstrated by If-Modified-Since or If-Unmodified-Since with a month greater than 11.
No Active Exploit Signals
CVSS Base Score
7.5
HIGH
EPSS Probability:2.77%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| embedthis | appweb | all |
| embedthis | goahead | all |
| juniper | junos | 12.1x46, 12.3x48, 15.1x49, 12.3, 15.1, 15.1x53, 16.1, 16.2, 17.1, 17.2, 17.3, 17.4, 18.1, 18.2, 18.3, 18.4 |
| juniper | srx100 | all |
| juniper | srx110 | all |
| juniper | srx1400 | all |
| juniper | srx1500 | all |
| juniper | srx210 | all |
| juniper | srx220 | all |
| juniper | srx240 | all |
| juniper | srx240h2 | all |
| juniper | srx240m | all |
| juniper | srx300 | all |
| juniper | srx320 | all |
| juniper | srx340 | all |
| juniper | srx3400 | all |
| juniper | srx345 | all |
| juniper | srx3600 | all |
| juniper | srx380 | all |
| juniper | srx4000 | all |
| juniper | srx4100 | all |
| juniper | srx4200 | all |
| juniper | srx4600 | all |
| juniper | srx5000 | all |
| juniper | srx5400 | all |
| juniper | srx550 | all |
| juniper | srx550_hm | all |
| juniper | srx550m | all |
| juniper | srx5600 | all |
| juniper | srx5800 | all |
| juniper | srx650 | all |
| juniper | ex2200 | all |
| juniper | ex2200-c | all |
| juniper | ex2200-vc | all |
| juniper | ex2300 | all |
| juniper | ex2300-24mp | all |
| juniper | ex2300-24p | all |
| juniper | ex2300-24t | all |
| juniper | ex2300-48mp | all |
| juniper | ex2300-48p | all |
| juniper | ex2300-48t | all |
| juniper | ex2300-c | all |
| juniper | ex2300m | all |
| juniper | ex3200 | all |
| juniper | ex3300 | all |
| juniper | ex3300-vc | all |
| juniper | ex3400 | all |
| juniper | ex4200 | all |
| juniper | ex4200-vc | all |
| juniper | ex4300 | all |
| juniper | ex4300-24p | all |
| juniper | ex4300-24p-s | all |
| juniper | ex4300-24t | all |
| juniper | ex4300-24t-s | all |
| juniper | ex4300-32f | all |
| juniper | ex4300-32f-dc | all |
| juniper | ex4300-32f-s | all |
| juniper | ex4300-48mp | all |
| juniper | ex4300-48mp-s | all |
| juniper | ex4300-48p | all |
| juniper | ex4300-48p-s | all |
| juniper | ex4300-48t | all |
| juniper | ex4300-48t-afi | all |
| juniper | ex4300-48t-dc | all |
| juniper | ex4300-48t-dc-afi | all |
| juniper | ex4300-48t-s | all |
| juniper | ex4300-48tafi | all |
| juniper | ex4300-48tdc | all |
| juniper | ex4300-48tdc-afi | all |
| juniper | ex4300-mp | all |
| juniper | ex4300-vc | all |
| juniper | ex4300m | all |
| juniper | ex4400 | all |
| juniper | ex4500 | all |
| juniper | ex4500-vc | all |
| juniper | ex4550 | all |
| juniper | ex4550-vc | all |
| juniper | ex4550\/vc | all |
| juniper | ex4600 | all |
| juniper | ex4600-vc | all |
| juniper | ex4650 | all |
| juniper | ex6200 | all |
| juniper | ex6210 | all |
| juniper | ex8200 | all |
| juniper | ex8200-vc | all |
| juniper | ex8208 | all |
| juniper | ex8216 | all |
| juniper | ex9200 | all |
| juniper | ex9204 | all |
| juniper | ex9208 | all |
| juniper | ex9214 | all |
| juniper | ex9250 | all |
| juniper | ex9251 | all |
| juniper | ex9253 | all |
| juniper | mx | all |
| juniper | mx10 | all |
| juniper | mx10000 | all |
| juniper | mx10003 | all |
| juniper | mx10008 | all |
| juniper | mx10016 | all |
| juniper | mx104 | all |
| juniper | mx150 | all |
| juniper | mx2008 | all |
| juniper | mx2010 | all |
| juniper | mx2020 | all |
| juniper | mx204 | all |
| juniper | mx240 | all |
| juniper | mx40 | all |
| juniper | mx480 | all |
| juniper | mx5 | all |
| juniper | mx80 | all |
| juniper | mx960 | all |
| juniper | ptx1000 | all |
| juniper | ptx1000-72q | all |
| juniper | ptx10000 | all |
| juniper | ptx10001 | all |
| juniper | ptx10001-36mr | all |
| juniper | ptx100016 | all |
| juniper | ptx10002 | all |
| juniper | ptx10002-60c | all |
| juniper | ptx10003 | all |
| juniper | ptx10003_160c | all |
| juniper | ptx10003_80c | all |
| juniper | ptx10003_81cd | all |
| juniper | ptx10004 | all |
| juniper | ptx10008 | all |
| juniper | ptx10016 | all |
| juniper | ptx3000 | all |
| juniper | ptx5000 | all |
| juniper | t1600 | all |
| juniper | t320 | all |
| juniper | t4000 | all |
| juniper | t640 | all |
| juniper | qfx10000 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
2.766%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2018-08-17T00:00:00 |
| Published | 2018-08-18T00:00:00 |
| Patch Date | 2018-08-17 |
| Last Updated | 2024-08-05T09:54:03 |
Community Chatter & Buzz