mpd project records

2 published records for vendor mpd project.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

2 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2020-7465No exploit	The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Causmpd project · mpd · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	3.0%	Oct 6, 2020
31Monitor	CVE-2020-7466No exploit	The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the mpd project · mpd · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	2.0%	Oct 6, 2020

CVE-2020-7465
40Plan
The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Caus
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Memory safety
mpd project · mpdOct 6, 2020
CVE-2020-7466
31Monitor
The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the
HighCVSS 7.5No exploitEPSS 2%
mpd project · mpdOct 6, 2020