VULNERABILITY INTELLIGENCE

CVE-2008-4050

CVSS score9.3 HIGH
EPSS probability6.75%
CISA KEVNot currently listed
Published2008-09-11
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to (1) create and read arbitrary registry values via the RegistryValue method, and (2) read arbitrary files via the GetTextFile method.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references