CVE-2017-20013 - Vulnerability Details - OpenCVE

A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8. Affected by this vulnerability is the Stresstest Configuration Handler. A manipulation leads to a local denial of service. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction Required

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00153.

Key SSVC decision points have not yet been added.

Vendors	Products
Weka	Interest Security Scanner

Configuration 1 [-]

cpe:2.3:a:weka:interest_security_scanner:*:*:*:*:*:*:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2017-11028	A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8. Affected by this vulnerability is the Stresstest Configuration Handler. A manipulation leads to a local denial of service. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://www.computec.ch/news.php?item.117
https://vuldb.com/?id.101969
https://vuldb.com/?id.101971

History

Tue, 15 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00076}`	epss `{'score': 0.00153}`

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2022-03-28T20:45:55

Updated: 2024-08-05T21:45:24.532Z

Reserved: 2022-01-28T00:00:00

Link: CVE-2017-20013

Vulnrichment

Updated: 2024-08-05T21:45:24.532Z

NVD

Status : Modified

Published: 2022-03-28T21:15:08.390

Modified: 2024-11-21T03:22:26.797

Link: CVE-2017-20013

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "INTEREST Security Scanner", "vendor": "WEKA", "versions": [{"status": "affected", "version": "1.0"}, {"status": "affected", "version": "1.1"}, {"status": "affected", "version": "1.2"}, {"status": "affected", "version": "1.3"}, {"status": "affected", "version": "1.4"}, {"status": "affected", "version": "1.5"}, {"status": "affected", "version": "1.6"}, {"status": "affected", "version": "1.7"}, {"status": "affected", "version": "1.8"}]}], "credits": [{"lang": "en", "value": "Marc Ruef"}], "descriptions": [{"lang": "en", "value": "A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8. Affected by this vulnerability is the Stresstest Configuration Handler. A manipulation leads to a local denial of service. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 2.8, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-404", "description": "CWE-404 Denial of Service", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-03-28T20:45:55", "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://vuldb.com/?id.101969"}, {"tags": ["x_refsource_MISC"], "url": "http://www.computec.ch/news.php?item.117"}, {"tags": ["x_refsource_MISC"], "url": "https://vuldb.com/?id.101971"}], "tags": ["unsupported-when-assigned"], "title": "WEKA INTEREST Security Scanner Stresstest Configuration denial of service", "x_generator": "vuldb.com", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cna@vuldb.com", "ID": "CVE-2017-20013", "REQUESTER": "cna@vuldb.com", "STATE": "PUBLIC", "TITLE": "WEKA INTEREST Security Scanner Stresstest Configuration denial of service"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "INTEREST Security Scanner", "version": {"version_data": [{"version_value": "1.0"}, {"version_value": "1.1"}, {"version_value": "1.2"}, {"version_value": "1.3"}, {"version_value": "1.4"}, {"version_value": "1.5"}, {"version_value": "1.6"}, {"version_value": "1.7"}, {"version_value": "1.8"}]}}]}, "vendor_name": "WEKA"}]}}, "credit": "Marc Ruef", "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8. Affected by this vulnerability is the Stresstest Configuration Handler. A manipulation leads to a local denial of service. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."}]}, "generator": "vuldb.com", "impact": {"cvss": {"baseScore": "2.8", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-404 Denial of Service"}]}]}, "references": {"reference_data": [{"name": "https://vuldb.com/?id.101969", "refsource": "MISC", "url": "https://vuldb.com/?id.101969"}, {"name": "http://www.computec.ch/news.php?item.117", "refsource": "MISC", "url": "http://www.computec.ch/news.php?item.117"}, {"name": "https://vuldb.com/?id.101971", "refsource": "MISC", "url": "https://vuldb.com/?id.101971"}]}}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-06T16:12:17.757855Z", "id": "CVE-2017-20013", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-06T16:12:44.207Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T21:45:24.532Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://vuldb.com/?id.101969"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.computec.ch/news.php?item.117"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://vuldb.com/?id.101971"}]}]}, "cveMetadata": {"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "assignerShortName": "VulDB", "cveId": "CVE-2017-20013", "datePublished": "2022-03-28T20:45:55", "dateReserved": "2022-01-28T00:00:00", "dateUpdated": "2024-08-05T21:45:24.532Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://vuldb.com/?id.101969", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "http://www.computec.ch/news.php?item.117", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://vuldb.com/?id.101971", "tags": ["x_refsource_MISC", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T21:45:24.532Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2017-20013", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-06T16:12:17.757855Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-06T16:12:28.702Z"}}], "cna": {"tags": ["unsupported-when-assigned"], "title": "WEKA INTEREST Security Scanner Stresstest Configuration denial of service", "credits": [{"lang": "en", "value": "Marc Ruef"}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.8, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "WEKA", "product": "INTEREST Security Scanner", "versions": [{"status": "affected", "version": "1.0"}, {"status": "affected", "version": "1.1"}, {"status": "affected", "version": "1.2"}, {"status": "affected", "version": "1.3"}, {"status": "affected", "version": "1.4"}, {"status": "affected", "version": "1.5"}, {"status": "affected", "version": "1.6"}, {"status": "affected", "version": "1.7"}, {"status": "affected", "version": "1.8"}]}], "references": [{"url": "https://vuldb.com/?id.101969", "tags": ["x_refsource_MISC"]}, {"url": "http://www.computec.ch/news.php?item.117", "tags": ["x_refsource_MISC"]}, {"url": "https://vuldb.com/?id.101971", "tags": ["x_refsource_MISC"]}], "x_generator": "vuldb.com", "descriptions": [{"lang": "en", "value": "A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8. Affected by this vulnerability is the Stresstest Configuration Handler. A manipulation leads to a local denial of service. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-404", "description": "CWE-404 Denial of Service"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2022-03-28T20:45:55"}, "x_legacyV4Record": {"credit": "Marc Ruef", "impact": {"cvss": {"version": "3.1", "baseScore": "2.8", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L"}}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_value": "1.0"}, {"version_value": "1.1"}, {"version_value": "1.2"}, {"version_value": "1.3"}, {"version_value": "1.4"}, {"version_value": "1.5"}, {"version_value": "1.6"}, {"version_value": "1.7"}, {"version_value": "1.8"}]}, "product_name": "INTEREST Security Scanner"}]}, "vendor_name": "WEKA"}]}}, "data_type": "CVE", "generator": "vuldb.com", "references": {"reference_data": [{"url": "https://vuldb.com/?id.101969", "name": "https://vuldb.com/?id.101969", "refsource": "MISC"}, {"url": "http://www.computec.ch/news.php?item.117", "name": "http://www.computec.ch/news.php?item.117", "refsource": "MISC"}, {"url": "https://vuldb.com/?id.101971", "name": "https://vuldb.com/?id.101971", "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "eng", "value": "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8. Affected by this vulnerability is the Stresstest Configuration Handler. A manipulation leads to a local denial of service. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-404 Denial of Service"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2017-20013", "STATE": "PUBLIC", "TITLE": "WEKA INTEREST Security Scanner Stresstest Configuration denial of service", "ASSIGNER": "cna@vuldb.com", "REQUESTER": "cna@vuldb.com"}}}}, "cveMetadata": {"cveId": "CVE-2017-20013", "state": "PUBLISHED", "dateUpdated": "2024-08-05T21:45:24.532Z", "dateReserved": "2022-01-28T00:00:00", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2022-03-28T20:45:55", "assignerShortName": "VulDB"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:weka:interest_security_scanner:*:*:*:*:*:*:*:*", "matchCriteriaId": "E6C6E298-764C-41E0-8B79-2E263122E4DF", "versionEndIncluding": "1.8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [{"sourceIdentifier": "cna@vuldb.com", "tags": ["unsupported-when-assigned"]}], "descriptions": [{"lang": "en", "value": "A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8. Affected by this vulnerability is the Stresstest Configuration Handler. A manipulation leads to a local denial of service. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"}, {"lang": "es", "value": "** NO SOPORTADO CUANDO DE ASIGN\u00d3 ** Se ha encontrado una vulnerabilidad clasificada como problem\u00e1tica en WEKA INTEREST Security Scanner versiones hasta 1.8. Afectado por esta vulnerabilidad es Stresstest Configuration Handler. Una manipulaci\u00f3n conlleva a una denegaci\u00f3n de servicio local. La explotaci\u00f3n ha sido divulgada al p\u00fablico y puede ser usada. NOTA: Esta vulnerabilidad s\u00f3lo afecta a productos que ya no son soportados por el mantenedor"}], "id": "CVE-2017-20013", "lastModified": "2024-11-21T03:22:26.797", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 2.1, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 2.8, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 1.3, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-03-28T21:15:08.390", "references": [{"source": "cna@vuldb.com", "tags": ["Third Party Advisory"], "url": "http://www.computec.ch/news.php?item.117"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/?id.101969"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/?id.101971"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.computec.ch/news.php?item.117"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/?id.101969"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/?id.101971"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-404"}], "source": "cna@vuldb.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-404"}], "source": "nvd@nist.gov", "type": "Primary"}]}