How severe is CVE-2019-12611?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 4.4 out of 10.

What type of vulnerability is CVE-2019-12611?

This is classified as CWE-770, which is a common weakness in software security.

CVE-2019-12611 - MEDIUM Severity | CVSS 4.4

Vulnerability Description

An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that affects the general reliability of the product. Specially crafted packets sent to the miniupnpd implementation in result in the device allocating memory without freeing it later. This behavior can cause the miniupnpd component to crash or to trigger a device reboot.

Related Vulnerabilities

CVE-2020-5982

MEDIUM

CVSS:4.4(Medium)

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) scheduler, in which the software does not properly limit the number or frequency of in...

CWE-7702020

CVE-2021-47130

MEDIUM

CVSS:4.4(Medium)

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix freeing unallocated p2pmem In case p2p device was found but the p2p pool is empty, the nvme target is still trying to fre...

CWE-7702021

CVE-2023-47717

MEDIUM

CVSS:4.4(Medium)

IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial of service. IBM X-Force ID: 271690.

CWE-7702023

CVE-2024-20968

MEDIUM

CVSS:4.4(Medium)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Difficult to exploit vulnerability allows h...

CWE-7702024

CVE-2024-47967

MEDIUM

CVSS:4.4(Medium)

Improper resource initialization handling in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service.

CWE-7702024

CVE-2025-21493

MEDIUM

CVSS:4.4(Medium)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.4.3 and prior and 9.1.0 and prior. Difficult to exploit ...

CWE-7702025