CVE-2020-12493

CRITICAL

10.0

Description

An open port used for debugging in SWARCOs CPU LS4000 Series with versions starting with G4... grants root access to the device without access control via network. A malicious user could use this vulnerability to get access to the device and disturb operations with connected devices.

CVE Details

CVSS v3.1 Score10.0

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published5/29/2020

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

swarco:cpu_ls4000_firmware

Weaknesses (CWE)

CWE-284

References

https://cert.vde.com/de-de/advisories/vde-2020-016(info@cert.vde.com)

https://cert.vde.com/de-de/advisories/vde-2020-016(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.