CVE-2020-25860
Last modified
CVE-2020-25860 is a medium-severity vulnerability rated 6.6/10 on the CVSS scale. The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the file is reopened for installation. An attacker who can modify the update file just before it is reopened can install arbitrary code on the device.. EPSS estimates a 1.42% chance of exploitation in the next 30 days.
Description
The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the file is reopened for installation. An attacker who can modify the update file just before it is reopened can install arbitrary code on the device.
Metrics
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Pengutronix | Rauc | < 1.5 |
References
- https://github.com/rauc/rauc/security/advisories/GHSA-cgf3-h62j-w9vvExploit, Third Party Advisory
- https://github.com/rauc/rauc/security/advisories/GHSA-cgf3-h62j-w9vvExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-25860?
How severe is CVE-2020-25860?
How do I fix CVE-2020-25860?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-25855The function AES_UnWRAP() in the Realtek RTL8195A Wi-Fi Modu…8.1
- CVE-2020-25856The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi …8.1
- CVE-2020-25857The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A W…7.5
- CVE-2020-25858The QCMAP_Web_CLIENT binary in the Qualcomm QCMAP software s…7.5
- CVE-2020-25859The QCMAP_CLI utility in the Qualcomm QCMAP software suite p…6.7
- CVE-2020-2586Vulnerability in the Oracle Human Resources product of Oracl…9.9
- CVE-2020-25862In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2…7.5
- CVE-2020-25863In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2…7.5
- CVE-2020-25864HashiCorp Consul and Consul Enterprise up to version 1.9.4 k…6.1
- CVE-2020-25866In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP pr…7.5
- CVE-2020-25867SoPlanning before 1.47 doesn't correctly check the security …5.3
- CVE-2020-25868Pexip Infinity 22.x through 24.x before 24.2 has Improper In…7.5
Are you affected by CVE-2020-25860?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST