CVE-2020-14507

Опубликовано: 15 июл. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Advantech iView, versions 5.6 and prior, is vulnerable to multiple path traversal vulnerabilities that could allow an attacker to create/download arbitrary files, limit system availability, and remotely execute code.

Ссылки

https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01
Third Party Advisory
US Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-20-829/
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-840/
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-841/
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-847/
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01
Third Party Advisory
US Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-20-829/
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-840/
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-841/
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-847/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:advantech:iview:*:*:*:*:*:*:*:*

Версия до 5.6 (включая)

EPSS

Процентиль: 82%

0.01728

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-hg6j-pj42-qfx4

github

больше 3 лет назад