[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2017-13083":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":24,"cwes":25,"cpes":30,"technologies":32,"references":34,"score":39,"epss_score":40,"epss_percentile":41,"is_kev":42,"cisa_kev_date_added":43,"cisa_kev_due_date":43,"cisa_ssvc":44,"attack_mappings":50,"exploits":138},213120,"CVE-2017-13083","EUVD-2017-4601","Akeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of updates downloaded over HTTP, allowing an attacker to easily convince a user to execute arbitrary code","2017-10-18T13:29:00Z",{"cvss_v2.0":10,"cvss_v3.0":18},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",6.8,"NETWORK","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","NONE","PARTIAL","MEDIUM",{"scope":19,"version":20,"baseScore":21,"attackVector":13,"baseSeverity":22,"vectorString":23,"integrityImpact":22,"userInteraction":15,"attackComplexity":22,"availabilityImpact":22,"privilegesRequired":15,"confidentialityImpact":22},"UNCHANGED","3.0",8.1,"HIGH","CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",true,[26,27,28,29],"CWE-295","CWE-345","CWE-347","CWE-494",[31],"cpe:2.3:a:akeo:rufus:*:b1186:*:*:*:*:*:*",[33],"Akeo Rufus",[35,36,37,38],"http:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F403768","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F100516","https:\u002F\u002Fgithub.com\u002Fpbatard\u002Frufus\u002Fcommit\u002Fc3c39f7f8a11f612c4ebf7affce25ec6928eb1cb","https:\u002F\u002Fgithub.com\u002Fpbatard\u002Frufus\u002Fissues\u002F1009",0.6,0.00963,0.61363,false,null,{"timestamp":43,"automatable":45,"tech_impact":46,"exploitation":47,"cisa_decision":48,"cisa_remediation_timeline":49},"no","partial","none",{},"FSU",[51,57,68,76,85,92,100,108,115,123,130],{"name":52,"source":53,"tactics":54,"technique_id":56},"Exploit Public-Facing Application","attack_vector",[55],"initial-access","T1190",{"name":58,"source":59,"cwe_ids":60,"tactics":61,"capec_ids":64,"technique_id":67},"Software Deployment Tools","capec",[29],[62,63],"execution","lateral-movement",[65,66],"CAPEC-187","CAPEC-657","T1072",{"name":69,"source":59,"cwe_ids":70,"tactics":71,"capec_ids":73,"technique_id":75},"Browser Session Hijacking",[29],[72],"collection",[74],"CAPEC-662","T1185",{"name":77,"source":59,"cwe_ids":78,"tactics":79,"capec_ids":80,"technique_id":84},"Compromise Software Dependencies and Development Tools",[29],[55],[81,82,83],"CAPEC-538","CAPEC-691","CAPEC-695","T1195.001",{"name":86,"source":59,"cwe_ids":87,"tactics":88,"capec_ids":89,"technique_id":91},"Compromise Software Supply Chain",[29],[55],[90,82],"CAPEC-186","T1195.002",{"name":93,"source":59,"cwe_ids":94,"tactics":95,"capec_ids":97,"technique_id":99},"Exploitation for Stealth",[27],[96],"stealth",[98],"CAPEC-665","T1211",{"name":101,"source":59,"cwe_ids":102,"tactics":103,"capec_ids":105,"technique_id":107},"Defacement",[27],[104],"impact",[106],"CAPEC-148","T1491",{"name":109,"source":59,"cwe_ids":110,"tactics":111,"capec_ids":113,"technique_id":114},"Component Firmware",[27],[112,96],"persistence",[98],"T1542.002",{"name":116,"source":59,"cwe_ids":117,"tactics":118,"capec_ids":121,"technique_id":122},"Modify Authentication Process",[27],[119,120,112],"credential-access","defense-impairment",[98],"T1556",{"name":124,"source":59,"cwe_ids":125,"tactics":126,"capec_ids":127,"technique_id":129},"ARP Cache Poisoning",[27],[72,119],[128],"CAPEC-141","T1557.002",{"name":131,"source":59,"cwe_ids":132,"tactics":133,"capec_ids":135,"technique_id":137},"DNS Server",[27],[134],"resource-development",[136],"CAPEC-142","T1584.002",[]]