exploitDog

CVE-2020-13872

Опубликовано: 09 июн. 2020

Источник: nvd

CVSS3: 8.8

CVSS2: 3.3

EPSS Низкий

Описание

Royal TS before 5 has a 0.0.0.0 listener, which makes it easier for attackers to bypass tunnel authentication via a brute-force approach.

Ссылки

http://packetstormsecurity.com/files/158000/RoyalTS-SSH-Tunnel-Authentication-Bypass.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2020/Jun/14
Third Party Advisory
https://hacktips.it/royalts-ssh-tunnel-authentication-bypass/
Exploit
http://packetstormsecurity.com/files/158000/RoyalTS-SSH-Tunnel-Authentication-Bypass.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2020/Jun/14
Third Party Advisory
https://hacktips.it/royalts-ssh-tunnel-authentication-bypass/
Exploit

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:royalapps:royal_ts:*:*:*:*:*:*:*:*

Версия до 5.0 (исключая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.00645

Низкий

8.8 High

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-307

Связанные уязвимости

GHSA-8xpj-f658-f859

CVSS3: 8.8

github

больше 3 лет назад

Royal TS before 5 has a 0.0.0.0 listener, which makes it easier for attackers to bypass tunnel authentication via a brute-force approach.

EPSS

Процентиль: 70%

0.00645

Низкий

8.8 High

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-307