Search Results (Refine Search)
- Results Type: Overview
- Keyword (text search): cpe:2.3:a:openwrt:lede:17.01.0:*:*:*:*:*:*:*
- CPE Name Search: true
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2020-7982 |
An issue was discovered in OpenWrt 18.06.0 to 18.06.6 and 19.07.0, and LEDE 17.01.0 to 17.01.7. A bug in the fork of the opkg package manager before 2020-01-25 prevents correct parsing of embedded checksums in the signed repository index, allowing a man-in-the-middle attacker to inject arbitrary package payloads (which are installed without verification). Published: March 16, 2020; 6:15:14 PM -0400 |
V3.1: 8.1 HIGH V2.0: 6.8 MEDIUM |