Vulnerability Details CVE-2016-10652
prebuild-lwip is a module for comprehensive, fast, and simple image processing and manipulation. prebuild-lwip downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.0%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 6.8
Products affected by CVE-2016-10652
-
cpe:2.3:a:prebuild-lwip_project:prebuild-lwip:0.0.1
-
cpe:2.3:a:prebuild-lwip_project:prebuild-lwip:0.0.2
-
cpe:2.3:a:prebuild-lwip_project:prebuild-lwip:0.0.3
-
cpe:2.3:a:prebuild-lwip_project:prebuild-lwip:0.0.4