PatchTheCVEpi3 vulnerabilities
Recent CVEs affecting pi3 products. 4 tracked.
pi3 has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2004-02-17. Highest priority: CVE-2002-0142 (score 53/100).
- CVE-2003-1032 MEDIUM 5.0 DOWNGRADE Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using
- CVE-2003-0276 MEDIUM 5.0 DOWNGRADE Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and possibly exec
- CVE-2002-0433 MEDIUM 5.0 DOWNGRADE Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a "*" (wildcard o
- CVE-2002-0142 HIGH 7.5 DOWNGRADE CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of servi
FAQ
How do I fix pi3 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pi3 being exploited right now?
None of the tracked pi3 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pi3 CVE should I patch first?
CVE-2002-0142 currently ranks highest (53/100): CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of servi.