Lucene search

[email protected]CVE-2020-23727

HistoryDec 03, 2020 - 6:15 p.m.

CVE-2020-23727

2020-12-0318:15:11

[email protected]

web.nvd.nist.gov

cve-2020-23727

antiy zhijia

terminal defense system

denial of service

vulnerability

nvd

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

There is a local denial of service vulnerability in the Antiy Zhijia Terminal Defense System 5.0.2.10121559 and an attacker can cause a computer crash (BSOD).

Affected configurations

NVD

Node

antiyantiy_zhijia_terminal_defense_systemMatch5.0.2.10121559

CPENameOperatorVersion
antiy:antiy_zhijia_terminal_defense_systemantiy antiy zhijia terminal defense systemeq5.0.2.10121559

CPE	Name	Operator	Version
antiy:antiy_zhijia_terminal_defense_system	antiy antiy zhijia terminal defense system	eq	5.0.2.10121559

References

github.com/y5s5k5/CVE-2020-23727

github.com/y5s5k5/POCtemp3

www.antiy.com

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2020-23727

nvd1 prion1 cvelist1