Lucene search

MitreCVE-2020-14461

HistoryJun 22, 2020 - 1:15 p.m.

CVE-2020-14461

2020-06-2213:15:12

CWE-22

mitre

web.nvd.nist.gov

cve-2020-14461

zyxel armor x1

wap6806

directory traversal

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

AI Score

8.5

Confidence

High

EPSS

0.196

Percentile

96.3%

JSON

Zyxel Armor X1 WAP6806 1.00(ABAL.6)C0 devices allow Directory Traversal via the images/eaZy/ URI.

Affected configurations

Nvd

Node

zyxelwap6806_firmwareMatch1.00\(abal.6\)c0

AND

zyxelwap6806Match-

VendorProductVersionCPE
zyxelwap6806_firmware1.00(abal.6)c0cpe:2.3:o:zyxel:wap6806_firmware:1.00\(abal.6\)c0:*:*:*:*:*:*:*
zyxelwap6806-cpe:2.3:h:zyxel:wap6806:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
zyxel	wap6806_firmware	1.00(abal.6)c0	cpe:2.3:o:zyxel:wap6806_firmware:1.00\(abal.6\)c0:::::::*
zyxel	wap6806	-	cpe:2.3:h:zyxel:wap6806:-:::::::*

References

packetstormsecurity.com/files/158428/Zyxel-Armor-X1-WAP6806-Directory-Traversal.html

cxsecurity.com/issue/WLB-2020060088

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

AI Score

8.5

Confidence

High

EPSS

0.196

Percentile

96.3%

JSON

Related for CVE-2020-14461