CVE-2020-9000
Last modified
CVE-2020-9000 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. An issue was discovered in iPortalis iCS 7.1.13.0. Attackers can send a sequence of requests to rapidly cause .NET Input Validation errors. EPSS estimates a 1.09% chance of exploitation in the next 30 days.
Description
An issue was discovered in iPortalis iCS 7.1.13.0. Attackers can send a sequence of requests to rapidly cause .NET Input Validation errors. This increases the size of the log file on the remote server until memory is exhausted, therefore consuming the maximum amount of resources (triggering a denial of service condition).
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Iportalis | Iportalis Control Portal | 7.1.13.0 |
References
- https://websec.nl/blog/Third Party Advisory
- https://websec.nl/blog/6127847280e759c7d31286d0/cve%20report%20august%202021/Third Party Advisory
- https://websec.nl/blog/Third Party Advisory
- https://websec.nl/blog/6127847280e759c7d31286d0/cve%20report%20august%202021/Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-9000?
How severe is CVE-2020-9000?
How do I fix CVE-2020-9000?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-8994An issue was discovered on XIAOMI AI speaker MDZ-25-DT 1.34.…6.8
- CVE-2020-8995Programi Bilanc Build 007 Release 014 31.01.2020 supplies a …9.8
- CVE-2020-8996AnyShare Cloud 6.0.9 allows authenticated directory traversa…4.3
- CVE-2020-8997Older generation Abbott FreeStyle Libre sensors allow remote…8.8
- CVE-2020-8998Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2020-8999Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2020-9001Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2020-9002An issue was discovered in iPortalis iCS 7.1.13.0. An attack…7.5
- CVE-2020-9003A stored XSS vulnerability exists in the Modula Image Galler…5.4
- CVE-2020-9004A remote authenticated authorization-bypass vulnerability in…8.8
- CVE-2020-9005meshsystem.dll in Valve Dota 2 through 2020-02-17 allows rem…7.8
- CVE-2020-9006The Popup Builder plugin 2.2.8 through 2.6.7.6 for WordPress…9.8
Are you affected by CVE-2020-9000?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST