Lucene search

MitreCVE-2020-12441

HistoryAug 06, 2020 - 7:15 p.m.

CVE-2020-12441

2020-08-0619:15:13

CWE-119

mitre

web.nvd.nist.gov

cve-2020-12441

denial-of-service

dos

ivanti service manager

heat remote control

buffer overflow

protocol parser

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

64.7%

JSON

Denial-of-Service (DoS) in Ivanti Service Manager HEAT Remote Control 7.4 due to a buffer overflow in the protocol parser of the ‘HEATRemoteService’ agent. The DoS can be triggered by sending a specially crafted network packet.

Affected configurations

Nvd

Node

ivantidesktop\&server_managementRange<2020.1

ivantiservice_manager_heat_remote_controlMatch7.4

VendorProductVersionCPE
ivantidesktop\&server_management*cpe:2.3:a:ivanti:desktop\&server_management:*:*:*:*:*:*:*:*
ivantiservice_manager_heat_remote_control7.4cpe:2.3:a:ivanti:service_manager_heat_remote_control:7.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ivanti	desktop\&server_management	*	cpe:2.3:a:ivanti:desktop\&server_management::::::::
ivanti	service_manager_heat_remote_control	7.4	cpe:2.3:a:ivanti:service_manager_heat_remote_control:7.4:::::::*

References

forums.ivanti.com/s/article/Release-Notes-for-DSM-2020-1

insinuator.net/2020/06/security-advisories-for-ivanti-dsm-suite/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

64.7%

JSON

Related for CVE-2020-12441