What is the CVSS score of CVE-2012-2095?

CVE-2012-2095 has a CVSS 2.0 base score of 6.9 (Medium). CVSS vector: AV:L/AC:M/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 0.6%.

Is there a public PoC exploit available for CVE-2012-2095?

Yes, a public proof-of-concept exploit is available for CVE-2012-2095. Prioritise patching immediately. EPSS: 0.6%.

Wicd CVE-2012-2095

MEDIUM

Improper Input Validation (CWE-20)

2014-04-07 secalert@redhat.com

Information Disclosure Wicd Fedora

6.9

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.9 MEDIUM

AV:L/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:N/C:C/I:C/A:C

Attack Vector

Local

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Apr 07, 2014 - 15:55 cve.org

MEDIUM 6.9

DescriptionCVE.org

AnalysisAI

The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configuration settings and gain privileges via a crafted property name in a dbus. Rated medium severity (CVSS 6.9). Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configuration settings and gain privileges via a crafted property name in a dbus message. Affected products include: David Paleino Wicd, Fedoraproject Fedora. Version information: before 1.7.2.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.