CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-5702

Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.361

EPSS Ranking 96.9%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.8

References

Products affected by CVE-2018-5702

Transmissionbt » Transmission » Version: 0.1

cpe:2.3:a:transmissionbt:transmission:0.1
Transmissionbt » Transmission » Version: 0.2

cpe:2.3:a:transmissionbt:transmission:0.2
Transmissionbt » Transmission » Version: 0.3

cpe:2.3:a:transmissionbt:transmission:0.3
Transmissionbt » Transmission » Version: 0.4

cpe:2.3:a:transmissionbt:transmission:0.4
Transmissionbt » Transmission » Version: 0.5

cpe:2.3:a:transmissionbt:transmission:0.5
Transmissionbt » Transmission » Version: 0.6

cpe:2.3:a:transmissionbt:transmission:0.6
Transmissionbt » Transmission » Version: 0.6.1

cpe:2.3:a:transmissionbt:transmission:0.6.1
Transmissionbt » Transmission » Version: 0.70

cpe:2.3:a:transmissionbt:transmission:0.70
Transmissionbt » Transmission » Version: 0.71

cpe:2.3:a:transmissionbt:transmission:0.71
Transmissionbt » Transmission » Version: 0.72

cpe:2.3:a:transmissionbt:transmission:0.72
Transmissionbt » Transmission » Version: 0.80

cpe:2.3:a:transmissionbt:transmission:0.80
Transmissionbt » Transmission » Version: 0.81

cpe:2.3:a:transmissionbt:transmission:0.81
Transmissionbt » Transmission » Version: 0.82

cpe:2.3:a:transmissionbt:transmission:0.82
Transmissionbt » Transmission » Version: 0.90

cpe:2.3:a:transmissionbt:transmission:0.90
Transmissionbt » Transmission » Version: 0.91

cpe:2.3:a:transmissionbt:transmission:0.91
Transmissionbt » Transmission » Version: 0.92

cpe:2.3:a:transmissionbt:transmission:0.92
Transmissionbt » Transmission » Version: 0.93

cpe:2.3:a:transmissionbt:transmission:0.93
Transmissionbt » Transmission » Version: 0.94

cpe:2.3:a:transmissionbt:transmission:0.94
Transmissionbt » Transmission » Version: 0.95

cpe:2.3:a:transmissionbt:transmission:0.95
Transmissionbt » Transmission » Version: 0.96

cpe:2.3:a:transmissionbt:transmission:0.96
Transmissionbt » Transmission » Version: 1.00

cpe:2.3:a:transmissionbt:transmission:1.00
Transmissionbt » Transmission » Version: 1.01

cpe:2.3:a:transmissionbt:transmission:1.01
Transmissionbt » Transmission » Version: 1.02

cpe:2.3:a:transmissionbt:transmission:1.02
Transmissionbt » Transmission » Version: 1.03

cpe:2.3:a:transmissionbt:transmission:1.03
Transmissionbt » Transmission » Version: 1.04

cpe:2.3:a:transmissionbt:transmission:1.04
Transmissionbt » Transmission » Version: 1.05

cpe:2.3:a:transmissionbt:transmission:1.05
Transmissionbt » Transmission » Version: 1.06

cpe:2.3:a:transmissionbt:transmission:1.06
Transmissionbt » Transmission » Version: 1.10

cpe:2.3:a:transmissionbt:transmission:1.10
Transmissionbt » Transmission » Version: 1.11

cpe:2.3:a:transmissionbt:transmission:1.11
Transmissionbt » Transmission » Version: 1.2

cpe:2.3:a:transmissionbt:transmission:1.2
Transmissionbt » Transmission » Version: 1.20

cpe:2.3:a:transmissionbt:transmission:1.20
Transmissionbt » Transmission » Version: 1.21

cpe:2.3:a:transmissionbt:transmission:1.21
Transmissionbt » Transmission » Version: 1.22

cpe:2.3:a:transmissionbt:transmission:1.22
Transmissionbt » Transmission » Version: 1.30

cpe:2.3:a:transmissionbt:transmission:1.30
Transmissionbt » Transmission » Version: 1.31

cpe:2.3:a:transmissionbt:transmission:1.31
Transmissionbt » Transmission » Version: 1.32

cpe:2.3:a:transmissionbt:transmission:1.32
Transmissionbt » Transmission » Version: 1.33

cpe:2.3:a:transmissionbt:transmission:1.33
Transmissionbt » Transmission » Version: 1.34

cpe:2.3:a:transmissionbt:transmission:1.34
Transmissionbt » Transmission » Version: 1.40

cpe:2.3:a:transmissionbt:transmission:1.40
Transmissionbt » Transmission » Version: 1.41

cpe:2.3:a:transmissionbt:transmission:1.41
Transmissionbt » Transmission » Version: 1.42

cpe:2.3:a:transmissionbt:transmission:1.42
Transmissionbt » Transmission » Version: 1.50

cpe:2.3:a:transmissionbt:transmission:1.50
Transmissionbt » Transmission » Version: 1.51

cpe:2.3:a:transmissionbt:transmission:1.51
Transmissionbt » Transmission » Version: 1.52

cpe:2.3:a:transmissionbt:transmission:1.52
Transmissionbt » Transmission » Version: 1.53

cpe:2.3:a:transmissionbt:transmission:1.53
Transmissionbt » Transmission » Version: 1.54

cpe:2.3:a:transmissionbt:transmission:1.54
Transmissionbt » Transmission » Version: 1.60

cpe:2.3:a:transmissionbt:transmission:1.60
Transmissionbt » Transmission » Version: 1.61

cpe:2.3:a:transmissionbt:transmission:1.61
Transmissionbt » Transmission » Version: 1.70

cpe:2.3:a:transmissionbt:transmission:1.70
Transmissionbt » Transmission » Version: 1.71

cpe:2.3:a:transmissionbt:transmission:1.71
Transmissionbt » Transmission » Version: 1.72

cpe:2.3:a:transmissionbt:transmission:1.72
Transmissionbt » Transmission » Version: 1.73

cpe:2.3:a:transmissionbt:transmission:1.73
Transmissionbt » Transmission » Version: 1.74

cpe:2.3:a:transmissionbt:transmission:1.74
Transmissionbt » Transmission » Version: 1.75

cpe:2.3:a:transmissionbt:transmission:1.75
Transmissionbt » Transmission » Version: 1.76

cpe:2.3:a:transmissionbt:transmission:1.76
Transmissionbt » Transmission » Version: 1.77

cpe:2.3:a:transmissionbt:transmission:1.77
Transmissionbt » Transmission » Version: 1.80

cpe:2.3:a:transmissionbt:transmission:1.80
Transmissionbt » Transmission » Version: 1.81

cpe:2.3:a:transmissionbt:transmission:1.81
Transmissionbt » Transmission » Version: 1.82

cpe:2.3:a:transmissionbt:transmission:1.82
Transmissionbt » Transmission » Version: 1.83

cpe:2.3:a:transmissionbt:transmission:1.83
Transmissionbt » Transmission » Version: 1.90

cpe:2.3:a:transmissionbt:transmission:1.90
Transmissionbt » Transmission » Version: 1.91

cpe:2.3:a:transmissionbt:transmission:1.91
Transmissionbt » Transmission » Version: 1.92

cpe:2.3:a:transmissionbt:transmission:1.92
Transmissionbt » Transmission » Version: 1.93

cpe:2.3:a:transmissionbt:transmission:1.93
Transmissionbt » Transmission » Version: 2.00

cpe:2.3:a:transmissionbt:transmission:2.00
Transmissionbt » Transmission » Version: 2.01

cpe:2.3:a:transmissionbt:transmission:2.01
Transmissionbt » Transmission » Version: 2.02

cpe:2.3:a:transmissionbt:transmission:2.02
Transmissionbt » Transmission » Version: 2.03

cpe:2.3:a:transmissionbt:transmission:2.03
Transmissionbt » Transmission » Version: 2.04

cpe:2.3:a:transmissionbt:transmission:2.04
Transmissionbt » Transmission » Version: 2.10

cpe:2.3:a:transmissionbt:transmission:2.10
Transmissionbt » Transmission » Version: 2.11

cpe:2.3:a:transmissionbt:transmission:2.11
Transmissionbt » Transmission » Version: 2.12

cpe:2.3:a:transmissionbt:transmission:2.12
Transmissionbt » Transmission » Version: 2.13

cpe:2.3:a:transmissionbt:transmission:2.13
Transmissionbt » Transmission » Version: 2.20

cpe:2.3:a:transmissionbt:transmission:2.20
Transmissionbt » Transmission » Version: 2.21

cpe:2.3:a:transmissionbt:transmission:2.21
Transmissionbt » Transmission » Version: 2.22

cpe:2.3:a:transmissionbt:transmission:2.22
Transmissionbt » Transmission » Version: 2.30

cpe:2.3:a:transmissionbt:transmission:2.30
Transmissionbt » Transmission » Version: 2.31

cpe:2.3:a:transmissionbt:transmission:2.31
Transmissionbt » Transmission » Version: 2.32

cpe:2.3:a:transmissionbt:transmission:2.32
Transmissionbt » Transmission » Version: 2.33

cpe:2.3:a:transmissionbt:transmission:2.33
Transmissionbt » Transmission » Version: 2.40

cpe:2.3:a:transmissionbt:transmission:2.40
Transmissionbt » Transmission » Version: 2.41

cpe:2.3:a:transmissionbt:transmission:2.41
Transmissionbt » Transmission » Version: 2.42

cpe:2.3:a:transmissionbt:transmission:2.42
Transmissionbt » Transmission » Version: 2.50

cpe:2.3:a:transmissionbt:transmission:2.50
Transmissionbt » Transmission » Version: 2.51

cpe:2.3:a:transmissionbt:transmission:2.51
Transmissionbt » Transmission » Version: 2.52

cpe:2.3:a:transmissionbt:transmission:2.52
Transmissionbt » Transmission » Version: 2.60

cpe:2.3:a:transmissionbt:transmission:2.60
Transmissionbt » Transmission » Version: 2.61

cpe:2.3:a:transmissionbt:transmission:2.61
Transmissionbt » Transmission » Version: 2.70

cpe:2.3:a:transmissionbt:transmission:2.70
Transmissionbt » Transmission » Version: 2.71

cpe:2.3:a:transmissionbt:transmission:2.71
Transmissionbt » Transmission » Version: 2.72

cpe:2.3:a:transmissionbt:transmission:2.72
Transmissionbt » Transmission » Version: 2.73

cpe:2.3:a:transmissionbt:transmission:2.73
Transmissionbt » Transmission » Version: 2.74

cpe:2.3:a:transmissionbt:transmission:2.74
Transmissionbt » Transmission » Version: 2.75

cpe:2.3:a:transmissionbt:transmission:2.75
Transmissionbt » Transmission » Version: 2.76

cpe:2.3:a:transmissionbt:transmission:2.76
Transmissionbt » Transmission » Version: 2.77

cpe:2.3:a:transmissionbt:transmission:2.77
Transmissionbt » Transmission » Version: 2.80

cpe:2.3:a:transmissionbt:transmission:2.80
Transmissionbt » Transmission » Version: 2.81

cpe:2.3:a:transmissionbt:transmission:2.81
Transmissionbt » Transmission » Version: 2.82

cpe:2.3:a:transmissionbt:transmission:2.82
Transmissionbt » Transmission » Version: 2.83

cpe:2.3:a:transmissionbt:transmission:2.83
Transmissionbt » Transmission » Version: 2.84

cpe:2.3:a:transmissionbt:transmission:2.84
Transmissionbt » Transmission » Version: 2.92

cpe:2.3:a:transmissionbt:transmission:2.92
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-5702

Products

Pricing

Contact Us