CVE-2017-13083mediumCWE-295CWE-345CWE-347CWE-494

CVE-2017-13083: medium-severity vulnerability in Akeo Consulting Rufus

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 1.0%
Akeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of updates downloaded over HTTP, allowing an attacker to easily convince a user to execute arbitrary code
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
Affected products
Akeo Consulting · Rufus
Related CVEs — Akeo Consulting Rufus

In the same product, most dangerous first.