CVE-2020-5685
Last modified
CVE-2020-5685 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands or cause a denial-of-service (DoS) condition by sending a specially crafted request to a specific URL.. EPSS estimates a 1.80% chance of exploitation in the next 30 days.
Description
UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands or cause a denial-of-service (DoS) condition by sending a specially crafted request to a specific URL.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Nec | Univerge Sv9500 Firmware | >= v1, <= v7 |
| Nec | Univerge Sv8500 Firmware | >= s6, <= s8 |
References
- https://jvn.jp/en/jp/JVN38784555/index.htmlThird Party Advisory
- https://www.necplatforms.co.jp/en/press/security_adv.htmlVendor Advisory
- https://jvn.jp/en/jp/JVN38784555/index.htmlThird Party Advisory
- https://www.necplatforms.co.jp/en/press/security_adv.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-5685?
How severe is CVE-2020-5685?
How do I fix CVE-2020-5685?
Are you affected by CVE-2020-5685?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST