CVE-2012-0310

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-01-13 · updated 2026-06-16
Weakness: CWE-94

Description

CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Affected products

Cogentdatahub Cascade Datahub: through 6.4.20
Cogent DataHub: through 7.1.2; 7.0, 7.0.2, 7.1.0, 7.1.1, 7.1.1.63
Cogentdatahub Opc Datahub: through 6.4.20

References

http://jvn.jp/en/jp/JVN63249231/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000002
http://secunia.com/advisories/47496
http://secunia.com/advisories/47525
http://www.cogentdatahub.com/ReleaseNotes.html
http://www.securityfocus.com/bid/51375
http://www.us-cert.gov/control_systems/pdf/ICSA-12-016-01.pdf
https://exchange.xforce.ibmcloud.com/vulnerabilities/72306
http://jvn.jp/en/jp/JVN63249231/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000002
http://secunia.com/advisories/47496
http://secunia.com/advisories/47525

Get alerted when CVE-2012-0310 or the next vulnerability affects your stack