CVE-2020-25237
Last modified
CVE-2020-25237 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2). When uploading files to an affected system using a zip container, the system does not correctly check if the relative file path of the extracted files is still within the intended target directory. EPSS estimates a 20.62% chance of exploitation in the next 30 days.
Description
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2). When uploading files to an affected system using a zip container, the system does not correctly check if the relative file path of the extracted files is still within the intended target directory. With this an attacker could create or overwrite arbitrary files on an affected system. This type of vulnerability is also known as 'Zip-Slip'. (ZDI-CAN-12054)
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Sinec Network Management System | < 1.0 |
| Siemens | Sinec Network Management System | 1.0 |
| Siemens | Sinema Server | < 14.0 |
| Siemens | Sinema Server | 14.0 |
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-040-03Third Party Advisory, US Government Resource
- https://www.zerodayinitiative.com/advisories/ZDI-21-253/Third Party Advisory, VDB Entry
- https://us-cert.cisa.gov/ics/advisories/icsa-21-040-03Third Party Advisory, US Government Resource
- https://www.zerodayinitiative.com/advisories/ZDI-21-253/Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-25237?
How severe is CVE-2020-25237?
How do I fix CVE-2020-25237?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-25231A vulnerability has been identified in LOGO! 8 BM (incl. SIP…5.5
- CVE-2020-25232A vulnerability has been identified in LOGO! 8 BM (incl. SIP…7.5
- CVE-2020-25233A vulnerability has been identified in LOGO! 8 BM (incl. SIP…5.5
- CVE-2020-25234A vulnerability has been identified in LOGO! 8 BM (incl. SIP…7.7
- CVE-2020-25235A vulnerability has been identified in LOGO! 8 BM (incl. SIP…7.5
- CVE-2020-25236A vulnerability has been identified in LOGO! 12/24RCE (6ED10…5.5
- CVE-2020-25238A vulnerability has been identified in PCS neo (Administrati…7.8
- CVE-2020-25239A vulnerability has been identified in SINEMA Remote Connect…8.8
- CVE-2020-2524Vulnerability in the Oracle Knowledge product of Oracle Know…5.9
- CVE-2020-25240A vulnerability has been identified in SINEMA Remote Connect…8.8
- CVE-2020-25241A vulnerability has been identified in SIMATIC MV400 family …7.5
- CVE-2020-25242A vulnerability has been identified in SIMATIC NET CP 343-1 …7.5
Are you affected by CVE-2020-25237?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST