CVE-2020-12493

CRITICAL

10.0

Description

An open port used for debugging in SWARCOs CPU LS4000 Series with versions starting with G4... grants root access to the device without access control via network. A malicious user could use this vulnerability to get access to the device and disturb operations with connected devices.

Details CVE

Score CVSS v3.110.0

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie5/29/2020

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

swarco:cpu_ls4000_firmware

Faiblesses (CWE)

CWE-284

References

https://cert.vde.com/de-de/advisories/vde-2020-016(info@cert.vde.com)

https://cert.vde.com/de-de/advisories/vde-2020-016(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.