CVE-2018-25043CWE-287

uTorrent PRNG improper authentication

Medium · published June 17, 2022

CVSS v3.1
5.0
EPSS
1%
Percentile
66.8
In the wild
Unconfirmed
What it is

A vulnerability classified as critical was found in uTorrent. This vulnerability affects unknown code of the component PRNG. The manipulation leads to weak authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01158 · 66.8th percentile
Weakness
CWE-287 · Improper Authentication
Published
2022-06-17T04:45Z
EPSS history
Timeline
  • 17 JUN 04:45Z
    uTorrent PRNG improper authentication
    cvelistv5