Lucene search
AttackerKBAKB:D327555B-F2B1-46E2-9304-D78576927C42HistoryMay 19, 2020 - 12:00 a.m.
CVE-2020-13167
2020-05-1900:00:00
attackerkb.com
10
0.974 High
EPSS
Percentile
99.9%
Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php (with certain Referer headers) launches a command line with client-supplied parameters, and allows injection of shell metacharacters.
Recent assessments:
wvu-r7 at May 21, 2020 5:51am UTC reported:
Metasploit exploit module already in the tree.
Assessed Attacker Value: 3
Assessed Attacker Value: 3Assessed Attacker Value: 5
Related
cve
cve
CVE-2020-13167
2020-05-19 20:15:10
prion
prion
Design/Logic Flaw
2020-05-19 20:15:00
nvd
nvd
CVE-2020-13167
2020-05-19 20:15:10
nuclei
nuclei
Netsweeper <=6.4.3 - Python Code Injection
2020-07-07 19:26:15
cvelist
cvelist
CVE-2020-13167
2020-05-19 19:29:41