1. Home
  2. CVE Database
  3. CVE-2016-10673
HIGH · 8.1

CVE-2016-10673

ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability ...

Vulnerability Description

ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an application.

CVSS Score

8.1

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
IpipIpip-Coffee<= 1.0.9

Related Weaknesses (CWE)

CWE-310CWE-311

References

FAQ

What is CVE-2016-10673?

CVE-2016-10673 is a vulnerability with a CVSS score of 8.1 (HIGH). ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability ...

How severe is CVE-2016-10673?

CVE-2016-10673 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-10673?

Check the references section above for vendor advisories and patch information. Affected products include: Ipip Ipip-Coffee.