CVE-2020-7847

CVSS 7.4 HIGHEPSS 0.5%CWE-434

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.4EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

23 feb 2021Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution. This issue affects: pTIME NAS 1.4.36.

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Productos afectados

EFM Networks · ipTIME NAS

Referencias

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35921