CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-7171

Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a .. (dot dot) in the contentbase parameter to rpc/set_all.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.494

EPSS Ranking 97.7%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2018-7171

Lynxtechnology » Twonky Server » Version: 7.0.11

cpe:2.3:a:lynxtechnology:twonky_server:7.0.11
Lynxtechnology » Twonky Server » Version: 7.0.12

cpe:2.3:a:lynxtechnology:twonky_server:7.0.12
Lynxtechnology » Twonky Server » Version: 7.0.13

cpe:2.3:a:lynxtechnology:twonky_server:7.0.13
Lynxtechnology » Twonky Server » Version: 7.0.14

cpe:2.3:a:lynxtechnology:twonky_server:7.0.14
Lynxtechnology » Twonky Server » Version: 7.0.15

cpe:2.3:a:lynxtechnology:twonky_server:7.0.15
Lynxtechnology » Twonky Server » Version: 7.0.16

cpe:2.3:a:lynxtechnology:twonky_server:7.0.16
Lynxtechnology » Twonky Server » Version: 7.1

cpe:2.3:a:lynxtechnology:twonky_server:7.1
Lynxtechnology » Twonky Server » Version: 7.1.1

cpe:2.3:a:lynxtechnology:twonky_server:7.1.1
Lynxtechnology » Twonky Server » Version: 7.1.2

cpe:2.3:a:lynxtechnology:twonky_server:7.1.2
Lynxtechnology » Twonky Server » Version: 7.1.3

cpe:2.3:a:lynxtechnology:twonky_server:7.1.3
Lynxtechnology » Twonky Server » Version: 7.1.4

cpe:2.3:a:lynxtechnology:twonky_server:7.1.4
Lynxtechnology » Twonky Server » Version: 7.1.5

cpe:2.3:a:lynxtechnology:twonky_server:7.1.5
Lynxtechnology » Twonky Server » Version: 7.1.6

cpe:2.3:a:lynxtechnology:twonky_server:7.1.6
Lynxtechnology » Twonky Server » Version: 7.2

cpe:2.3:a:lynxtechnology:twonky_server:7.2
Lynxtechnology » Twonky Server » Version: 7.2.1

cpe:2.3:a:lynxtechnology:twonky_server:7.2.1
Lynxtechnology » Twonky Server » Version: 7.2.10

cpe:2.3:a:lynxtechnology:twonky_server:7.2.10
Lynxtechnology » Twonky Server » Version: 7.2.2

cpe:2.3:a:lynxtechnology:twonky_server:7.2.2
Lynxtechnology » Twonky Server » Version: 7.2.3

cpe:2.3:a:lynxtechnology:twonky_server:7.2.3
Lynxtechnology » Twonky Server » Version: 7.2.4

cpe:2.3:a:lynxtechnology:twonky_server:7.2.4
Lynxtechnology » Twonky Server » Version: 7.2.5

cpe:2.3:a:lynxtechnology:twonky_server:7.2.5
Lynxtechnology » Twonky Server » Version: 7.2.6

cpe:2.3:a:lynxtechnology:twonky_server:7.2.6
Lynxtechnology » Twonky Server » Version: 7.2.7

cpe:2.3:a:lynxtechnology:twonky_server:7.2.7
Lynxtechnology » Twonky Server » Version: 7.2.9

cpe:2.3:a:lynxtechnology:twonky_server:7.2.9
Lynxtechnology » Twonky Server » Version: 7.3

cpe:2.3:a:lynxtechnology:twonky_server:7.3
Lynxtechnology » Twonky Server » Version: 7.3.1

cpe:2.3:a:lynxtechnology:twonky_server:7.3.1
Lynxtechnology » Twonky Server » Version: 7.3.1-10

cpe:2.3:a:lynxtechnology:twonky_server:7.3.1-10
Lynxtechnology » Twonky Server » Version: 7.3.1-11

cpe:2.3:a:lynxtechnology:twonky_server:7.3.1-11
Lynxtechnology » Twonky Server » Version: 7.3.1-12

cpe:2.3:a:lynxtechnology:twonky_server:7.3.1-12
Lynxtechnology » Twonky Server » Version: 7.3.1-13

cpe:2.3:a:lynxtechnology:twonky_server:7.3.1-13
Lynxtechnology » Twonky Server » Version: 7.3.1-2

cpe:2.3:a:lynxtechnology:twonky_server:7.3.1-2
Lynxtechnology » Twonky Server » Version: 7.3.1-3

cpe:2.3:a:lynxtechnology:twonky_server:7.3.1-3
Lynxtechnology » Twonky Server » Version: 7.3.1-4

cpe:2.3:a:lynxtechnology:twonky_server:7.3.1-4
Lynxtechnology » Twonky Server » Version: 7.3.1-5

cpe:2.3:a:lynxtechnology:twonky_server:7.3.1-5
Lynxtechnology » Twonky Server » Version: 7.3.1-6

cpe:2.3:a:lynxtechnology:twonky_server:7.3.1-6
Lynxtechnology » Twonky Server » Version: 7.3.1-7

cpe:2.3:a:lynxtechnology:twonky_server:7.3.1-7
Lynxtechnology » Twonky Server » Version: 7.3.1-8

cpe:2.3:a:lynxtechnology:twonky_server:7.3.1-8
Lynxtechnology » Twonky Server » Version: 8.0.0

cpe:2.3:a:lynxtechnology:twonky_server:8.0.0
Lynxtechnology » Twonky Server » Version: 8.0.1

cpe:2.3:a:lynxtechnology:twonky_server:8.0.1
Lynxtechnology » Twonky Server » Version: 8.0.2

cpe:2.3:a:lynxtechnology:twonky_server:8.0.2
Lynxtechnology » Twonky Server » Version: 8.0.3

cpe:2.3:a:lynxtechnology:twonky_server:8.0.3
Lynxtechnology » Twonky Server » Version: 8.0.4

cpe:2.3:a:lynxtechnology:twonky_server:8.0.4
Lynxtechnology » Twonky Server » Version: 8.1.0

cpe:2.3:a:lynxtechnology:twonky_server:8.1.0
Lynxtechnology » Twonky Server » Version: 8.1.1

cpe:2.3:a:lynxtechnology:twonky_server:8.1.1
Lynxtechnology » Twonky Server » Version: 8.1.2

cpe:2.3:a:lynxtechnology:twonky_server:8.1.2
Lynxtechnology » Twonky Server » Version: 8.2.0

cpe:2.3:a:lynxtechnology:twonky_server:8.2.0
Lynxtechnology » Twonky Server » Version: 8.2.1

cpe:2.3:a:lynxtechnology:twonky_server:8.2.1
Lynxtechnology » Twonky Server » Version: 8.3

cpe:2.3:a:lynxtechnology:twonky_server:8.3
Lynxtechnology » Twonky Server » Version: 8.4

cpe:2.3:a:lynxtechnology:twonky_server:8.4
Lynxtechnology » Twonky Server » Version: 8.4.1

cpe:2.3:a:lynxtechnology:twonky_server:8.4.1
Lynxtechnology » Twonky Server » Version: 8.5

cpe:2.3:a:lynxtechnology:twonky_server:8.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-7171

Products

Pricing

Contact Us