CVE-2008-4050 EXPLOIT
9.3
HIGH · CVSS 2.0 · EPSS 6.7% (pctl 94)
Patch early
A public exploit exists.
Description
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to (1) create and read arbitrary registry values via the RegistryValue method, and (2) read arbitrary files via the GetTextFile method.
Scoring
| CVSS | 9.3 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
| EPSS | 6.75% — more likely to be exploited than 94% of all CVEs |
| Weakness | CWE-20 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-09-11 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| friendly technologies | friendly pppoe client |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Friendly Technologies - Read/Write Registry/Read Files | 2008-08-30 |
References
- http://secunia.com/advisories/31644
- http://securityreason.com/securityalert/4244
- http://www.securityfocus.com/bid/30939
- http://www.securityfocus.com/bid/30940
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44787
- https://www.exploit-db.com/exploits/6334
- http://secunia.com/advisories/31644
- http://securityreason.com/securityalert/4244
- http://www.securityfocus.com/bid/30939
- http://www.securityfocus.com/bid/30940
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44787
- https://www.exploit-db.com/exploits/6334
→ the Explorer · watch your stack · NVD