CVE-2018-1000621
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-1000621
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Mycroft AI mycroft-core version 18.2.8b and earlier contains a Incorrect Access Control vulnerability in Websocket configuration that can result in code execution. This impacts ONLY the Mycroft for Linux and "non-enclosure" installs - Mark 1 and Picroft unaffected. This attack appear to be exploitable remote access to the unsecured websocket server. This vulnerability appears to have been fixed in No fix currently available.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Mycroft AI mycroft-core 访问控制错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mycroft AI mycroft-core是一款智能语音应用程序。 Mycroft AI mycroft-core 18.2.8b及之前版本中的Websocket配置存在访问控制错误漏洞。攻击者可利用该漏洞执行代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2018-1000621
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-1000621
请登录查看更多情报信息。
- 🔗 https://github.com/Nhoya/MycroftAI-RCEx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2018-1000621
Same Patch Batch · n/a · 2018-07-09 · 423 CVEs total
| CVE-2018-13739 | dopnetwork 数字错误漏洞 | |
| CVE-2018-13752 | Thread 数字错误漏洞 | |
| CVE-2018-13751 | JustWallet 数字错误漏洞 | |
| CVE-2018-13750 | RichiumToken 数字错误漏洞 | |
| CVE-2018-13749 | FinalToken 数字错误漏洞 | |
| CVE-2018-13748 | CarToken 数字错误漏洞 | |
| CVE-2018-13747 | VanMinhCoin 数字错误漏洞 | |
| CVE-2018-13746 | kBit 数字错误漏洞 | |
| CVE-2018-13745 | STCToken 数字错误漏洞 | |
| CVE-2018-13744 | Crowdnext 数字错误漏洞 | |
| CVE-2018-13743 | SuperEnergy 输入验证错误漏洞 | |
| CVE-2018-13742 | tickets 数字错误漏洞 | |
| CVE-2018-13741 | ABLGenesisToken 数字错误漏洞 | |
| CVE-2018-13740 | OneChain 数字错误漏洞 | |
| CVE-2018-13729 | JPMD100B 数字错误漏洞 | |
| CVE-2018-13732 | RiptideCoin 数字错误漏洞 | |
| CVE-2018-13731 | TokenMACHU 数字错误漏洞 | |
| CVE-2018-13730 | HEY 数字错误漏洞 | |
| CVE-2018-13733 | ProjectJ 数字错误漏洞 | |
| CVE-2018-13728 | JixoCoin 数字错误漏洞 |
Showing top 20 of 423 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8747
Z-BlogPHP Commend Approval c_system_event.php CheckComment i - CVE-2026-8746
Open5GS NRF nghttp2-server.c discover_handler use after free - CVE-2026-8745
Open5GS AUSF nausf-handler.c ogs_timer_add denial of service - CVE-2026-8744
Open5GS NRF context.c ogs_sbi_nf_service_add denial of servi - CVE-2026-8743
Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id impr
V. Comments for CVE-2018-1000621
No comments yet