Remote Code Execution Vulnerability in Wowza Streaming Engine
CVE-2018-7047

9.8CRITICAL

Key Information:

Vendor

Wowza

Status
Streaming Engine
Vendor
CVE Published:
1 March 2018

What is CVE-2018-7047?

A vulnerability exists in the MBeans Server of Wowza Streaming Engine versions prior to 4.7.1, which may allow unauthorized access to the file system via JMX with default credentials. This could enable attackers to read and write to the file system and potentially execute remote code. It is crucial for users of the affected versions to apply the latest patches to mitigate the risk associated with this vulnerability.

References

https://www.wowza.com/docs/wowza-streaming-engine-4-7-1-r...
x_refsource_MISC
https://raw.githubusercontent.com/WowzaMediaSystems/publi...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.