CVE-2020-29023

Опубликовано: 16 фев. 2021

Источник: nvd

CVSS3: 3.5

CVSS2: 4.9

EPSS Низкий

Описание

Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program (like Excel). This issue affects: Secomea GateManager all versions prior to 9.3.

Ссылки

https://www.secomea.com/support/cybersecurity-advisory/
Vendor Advisory
https://www.secomea.com/support/cybersecurity-advisory/#2418
Vendor Advisory
https://www.secomea.com/support/cybersecurity-advisory/
Vendor Advisory
https://www.secomea.com/support/cybersecurity-advisory/#2418
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:secomea:gatemanager_4250_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:secomea:gatemanager_4250:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:secomea:gatemanager_4260_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:secomea:gatemanager_4260:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:secomea:gatemanager_9250_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:secomea:gatemanager_9250:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:secomea:gatemanager_8250_firmware:*:*:*:*:*:*:*:*

Версия до 9.3 (исключая)

cpe:2.3:h:secomea:gatemanager_8250:-:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00214

Низкий

3.5 Low

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-116

Связанные уязвимости

GHSA-fw85-97w2-fp5v

github

больше 3 лет назад

EPSS

Процентиль: 44%

0.00214

Низкий

3.5 Low

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-116