An issue was discovered in the prost-types crate before 0.8.0 for Rust. An overflow can occur during conversion from Timestamp to SystemTime.
📦
prost
Vendor: airspan
Actively Exploited
0
CISA KEV List
PoC / Exploits
0
Code Available
Total RCEs
1
Remote Access
Total CVEs
1
Total Indexed
Avg. EPSS
1.08%
Exploit Prob.
Security Vulnerability Index
Page 1 / 1
7.5
CVSS
Severity: HIGH
9.8
CVSS
CVE-2020-35858
RCE
An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service (e.g., x86) or possibly remote code execution (e.g., ARM).
Severity: CRITICAL
7.5
CVSS
The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX ProST have a certain default User ID and password, which makes it easier for remote attackers to obtain partial administrative access, a different vulnerability than CVE-2008-1262.
Severity: HIGH