CVE-2008-7173
The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly...
The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service (physical damage), modify coffee settings, and possibly execute code via a crafted request. NOTE: this issue is being included in CVE because the denial of service may include financial loss or water damage.
Exploit likelihood
What each source reports
NVD Score used
The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service (physical damage), modify coffee settings, and possibly execute code via a crafted request. NOTE: this issue is being included in CVE because the denial of service may include financial loss or water damage.
- Record
CVE-2008-7173- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service (physical damage), modify coffee settings, and possibly execute code via a crafted request. NOTE: this issue is being included in CVE because the denial of service may include financial loss or water damage.
- Record
CVE-2008-7173- Updated
- 2026-11-02
EUVDEUVD-2008-7132 No score
The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service (physical damage), modify coffee settings, and possibly execute code via a crafted request. NOTE: this issue is being included in CVE because the denial of service may include financial loss or water damage.
- Record
EUVD-2008-7132- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gjpr-j462-595q No score
The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly...
The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service (physical damage), modify coffee settings, and possibly execute code via a crafted request. NOTE: this issue is being included in CVE because the denial of service may include financial loss or water damage.
- Record
GHSA-gjpr-j462-595q- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-7173 is a high vulnerability (CVSS 10.0) in Juracapecoffee Internet Connectivity Kit, published September 8, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.70%, the 91st percentile. No source names a fixed version.
References
securityfocus.com/archive/1/493440/100/0/threaded
osvdb.org/46407
news.cnet.com/8301-10784_3-9970757-7.html
attrition.org/pipermail/vim/2008-June/002002.html
nvd.nist.gov/vuln/detail/CVE-2008-7173
github.com/advisories/GHSA-gjpr-j462-595q