CVE-2020-35488
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 7.6%
from disclosure to weapon0 days
Published on NVDJan 5
1st PoCDec 15
exploitation probability
7.6%top 6% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service (daemon crash) via a crafted Syslog payload to the Syslog service. This attack requires a specific configuration. Also, the name of the directory created must use a Syslog field. (For example, on Linux it is not possible to create a .. directory. On Windows, it is not possible to create a CON directory.)
Affected products
n/a · n/apublic PoCs found — 3
githubgithub.com/GuillaumePetit84/CVE-2020-35488★ 1githubgithub.com/githubfoam/nxlog-ubuntu-githubactions★ 0exploitdbwww.exploit-db.com/exploits/49283unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.