CWE-123: Write-what-where Condition
Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.
A kind of CWE-787 Out-of-bounds Write.
From the CWE List. © The MITRE Corporation.
Newest
- auvesy versiondogAUVESY Versiondog9.8 Critical
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP Toolkit SDK Write-What-Where Condition Could Lead To Local Application Denial Of Service4.0 Medium
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Local Privilege Escalation Vulnerability6.7 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Local Privilege Escalation Vulnerability5.1 Medium
- schneider-electric unity pro, ecostruxure control expert +1 moreA CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all...8.6 High
- deltaww tpeditorDelta Electronics TPEditor Versions 1.97 and prior. A write-what-where condition may be exploited...7.8 High
- palo alto networks pan-osPAN-OS: Panorama External control of file vulnerability leads to privilege escalation8.1 High
- honeywell experion pks, experion process knowledge system +1 moreAn arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell Experion...9.8 Critical
- atlantiswordprocessor atlantis word processorAn exploitable arbitrary write vulnerability exists in the open document format parser of the...8.8 High
- sophos hitmanpro.alert, talos sophos +1 moreAn exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality...9.3 Critical
- cisco ios software, ios +1 moreCisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write Vulnerabilities6.7 Medium
- cisco ios software, ios +1 moreCisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write Vulnerabilities6.7 Medium
- webroot secureanywhereWebroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that...7.8 High
- owasp dependency-checkPath Traversal in OWASP Dependency-Check7.8 High
- google android, nvidia shield tv, shield tv firmware +2 moreNVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to...7.8 High
- foxitsoftware foxit reader, phantompdf +1 moreFoxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability,...7.3 High
- rtmpdump project rtmpdumpThe AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute...9.8 Critical