CVE-2020-23160

Опубликовано: 26 янв. 2021

Источник: nvd

CVSS3: 8.8

CVSS2: 9

EPSS Средний

Описание

Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to arbitrary commands as root on the devices.

Ссылки

https://github.com/Outpost24/Pyrescom-Termod-PoC
Exploit
Third Party Advisory
https://outpost24.com/blog/multiple-vulnerabilities-discovered-in-Pyrescom-Termod4-smart-device
Exploit
Technical Description
Third Party Advisory
https://pyres.com/en/solutions/termod-4/
Product
Vendor Advisory
https://github.com/Outpost24/Pyrescom-Termod-PoC
Exploit
Third Party Advisory
https://outpost24.com/blog/multiple-vulnerabilities-discovered-in-Pyrescom-Termod4-smart-device
Exploit
Technical Description
Third Party Advisory
https://pyres.com/en/solutions/termod-4/
Product
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:pyres:termod4_firmware:*:*:*:*:*:*:*:*

Версия до 10.04k (исключая)

cpe:2.3:h:pyres:termod4:-:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.2087

Средний

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-f3p9-mw6f-g5p7

github

больше 3 лет назад