Excessive Reliance on Global Variables
CWE-1108
The code is structured in a way that relies too much on using or setting global variables throughout various points in the code, instead of preserving the associated information in a narrower, more local context.
We track 2 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.8.
Latest Excessive Reliance on Global Variables vulnerabilities
- 8.1 High severity
Edimax GS-5008PL: Excessive Reliance on Global Variables
Edimax GS-5008PL firmware versions 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface. Attackers can exploit the global authentication flag mechanism to gain administrative
- 7.5 High severity
Remote Compact Controller (RCC) 972: Excessive Reliance on Global Variables
Horner Automation’s RCC 972 firmware version 15.40 contains global variables. This could allow an attacker to read out sensitive values and variable keys from the device.