Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-3140

Опубликовано: 16 июл. 2020
Источник: nvd
CVSS3: 9.8
CVSS3: 9.8
CVSS2: 10
EPSS Низкий

Описание

A vulnerability in the web management interface of Cisco Prime License Manager (PLM) Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An attacker could exploit this vulnerability by submitting a malicious request to an affected system. An exploit could allow the attacker to gain administrative-level privileges on the system. The attacker needs a valid username to exploit this vulnerability.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:prime_license_manager:*:*:*:*:*:*:*:*
Версия до 10.5\(2\)su9 (включая)
cpe:2.3:a:cisco:prime_license_manager:*:*:*:*:*:*:*:*
Версия от 11.0 (включая) до 11.5\(1\)su6 (включая)

EPSS

Процентиль: 82%
0.01659
Низкий

9.8 Critical

CVSS3

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-255
CWE-863

Связанные уязвимости

github
больше 3 лет назад

A vulnerability in the web management interface of Cisco Prime License Manager (PLM) Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An attacker could exploit this vulnerability by submitting a malicious request to an affected system. An exploit could allow the attacker to gain administrative-level privileges on the system. The attacker needs a valid username to exploit this vulnerability.

CVSS3: 9.8
fstec
больше 5 лет назад

Уязвимость интерфейса веб-управления программного средства управление лицензированием Cisco Prime License Manager (PLM), позволяющая нарушителю получить доступ к устройству

EPSS

Процентиль: 82%
0.01659
Низкий

9.8 Critical

CVSS3

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-255
CWE-863