Lucene search

[email protected]CVE-2020-18329

HistoryJan 26, 2023 - 9:15 p.m.

CVE-2020-18329

2023-01-2621:15:18

CWE-281

[email protected]

web.nvd.nist.gov

rehau

pcoweb

bios

cve-2020-18329

security

vulnerability

unauthenticated access

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.3%

JSON

An issue was discovered in Rehau devices that use a pCOWeb card BIOS v6.27, BOOT v5.00, web version v2.2, allows attackers to gain full unauthenticated access to the configuration and service interface.

Affected configurations

NVD

Node

carelpcoweb_card_webMatch2.2

carelpcoweb_card_biosMatch6.27

carelpcoweb_card_bootMatch5.00

CPENameOperatorVersion
carel:pcoweb_card_webcarel pcoweb card webeq2.2
carel:pcoweb_card_bioscarel pcoweb card bioseq6.27
carel:pcoweb_card_bootcarel pcoweb card booteq5.00

CPE	Name	Operator	Version
carel:pcoweb_card_web	carel pcoweb card web	eq	2.2
carel:pcoweb_card_bios	carel pcoweb card bios	eq	6.27
carel:pcoweb_card_boot	carel pcoweb card boot	eq	5.00

References

github.com/cybertoxin/CVEs/blob/main/CVE_2020_18329.md

medium.com/%40SergiuSechel/insecure-permissions-in-rehau-group-unlimited-polymer-solutions-implementation-of-carel-pcoweb-514c148ae694

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.3%

JSON

Related for CVE-2020-18329

nvd1 cvelist1 prion1