VULNERABILITY INTELLIGENCE

CVE-2010-2271

CVSS score7.5 HIGH
EPSS probability1.41%
CISA KEVNot currently listed
Published2010-06-15
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Format string vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to have an unspecified impact via format string specifiers in the path (aka Password File) parameter.

Weakness classification

  • CWE-134: Use of Externally-Controlled Format String

Primary references