Lucene search

[email protected]CVE-2020-10383

HistoryApr 14, 2020 - 5:15 p.m.

CVE-2020-10383

2020-04-1417:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2020-10383

mb connect line

mymbconnect24

mbconnect24

remote code execution

security vulnerability

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.6%

JSON

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated remote code execution in the com_mb24sysapi module.

CPENameOperatorVersion
mbconnectline:mymbconnect24mbconnectline mymbconnect24le2.5.0
mbconnectline:mbconnect24mbconnectline mbconnect24le2.5.0

CPE	Name	Operator	Version
mbconnectline:mymbconnect24	mbconnectline mymbconnect24	le	2.5.0
mbconnectline:mbconnect24	mbconnectline mbconnect24	le	2.5.0

References

mbconnectline.com/security-advice/

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.6%

JSON

Related for CVE-2020-10383

cvelist1 prion1