CVE-2020-22002

🗓️ 29 Apr 2021 14:22:20Reported by mitreType

cve

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 55 Views🌐 WEB

An Unauthenticated Server-Side Request Forgery (SSRF) vulnerability in Inim Electronics Smartlivin

Reporter	Title	Published	Views	Family All 6
CNNVD	INIM ELECTRONICS SmartLiving System 代码问题漏洞	29 Apr 202100:00	–	cnnvd
Cvelist	CVE-2020-22002	29 Apr 202114:22	–	cvelist
EUVD	EUVD-2020-14768	7 Oct 202500:30	–	euvd
NVD	CVE-2020-22002	29 Apr 202115:15	–	nvd
Prion	Server side request forgery (ssrf)	29 Apr 202115:15	–	prion
RedhatCVE	CVE-2020-22002	22 May 202516:57	–	redhatcve

NVD

Node

inim smartliving_505_firmwareMatch-

AND

inim smartliving_505Match-

Node

inim smartliving_515_firmwareMatch-

AND

inim smartliving_515Match-

Node

inim smartliving_1050_firmwareMatch-

AND

inim smartliving_1050Match-

Node

inim smartliving_1050g3_firmwareMatch-

AND

inim smartliving_1050g3Match-

Node

inim smartliving_10100l_firmwareMatch-

AND

inim smartliving_10100lMatch-

Node

inim smartliving_10100lg3_firmwareMatch-

AND

inim smartliving_10100lg3Match-

Source	Link
zeroscience	www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5545.php
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/172839

Parameter	Position	Path	Description	CWE
host	query param	/GetImage	Unauthenticated SSRF via GetImage 'host' parameter leading to arbitrary external HTTP requests through onvif.cgi	CWE-918

21 Nov 2024 05:13Current

7.5High risk

Vulners AI Score7.5

CVSS 25

CVSS 3.17.5

EPSS0.00744

cve-2020-22002 ssrf inim electronics smartliving smartlan smartlan/g/si security vulnerability nvd