CVE-2008-7173 The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service (physical....
HighCVSS 10.0
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service (physical damage), modify coffee settings, and possibly execute code via a crafted request. NOTE: this issue is being included in CVE because the denial of service may include financial loss or water damage.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juracapecoffee internet connectivity kit | All versions | No fix listed |
References
- 20080618 coffee maker hacks - yes or no? mailing-list
- news.cnet.com
- 46407 vdb-entry
- 20080617 Hacking Coffee Makers. mailing-list
- 20080618 A more detailed description of the Jura F90 vulnerability. mailing-list
- 20080618 RE: A more detailed description of the Jura F90 vulnerability. mailing-list
- 29767 vdb-entry