Lucene search

[email protected]CVE-2020-3925

HistoryFeb 03, 2020 - 11:15 a.m.

CVE-2020-3925

2020-02-0311:15:12

[email protected]

web.nvd.nist.gov

cve-2020-3925

remote code execution

rce

servisign

security plugin

nvd

vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.4%

JSON

A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers are able to launch RCE and executes arbitrary command on target system via malicious crafted scripts.

Affected configurations

NVD

Node

changingtecservisignRange≤1.0.19.0617

AND

microsoftwindowsMatch-

CPENameOperatorVersion
changingtec:servisignchangingtec servisignle1.0.19.0617

CPE	Name	Operator	Version
changingtec:servisign	changingtec servisign	le	1.0.19.0617

CNA Affected

[
  {
    "product": "ServiSign Windows versions ",
    "vendor": "CHANGING",
    "versions": [
      {
        "lessThanOrEqual": "1.0.19.0617",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

tvn.twcert.org.tw/taiwanvn/TVN-201910005

www.chtsecurity.com/news/1179d48b-7609-4f67-9d7e-3bac2979c6ce

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.4%

JSON

Related for CVE-2020-3925

prion1 cvelist1 nvd1