60
CVE-2016-4484
PoC —CVSS 3.0
6.8 medium
EPSS
<1%p51
Published
()
Modified
Description
The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password.
- Vendors
- cryptsetup project
- Products
- cryptsetup
- Weakness
- CWE-287
- Vector
- CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H