Lucene search

K
cve[email protected]CVE-2020-5554
HistoryMar 25, 2020 - 2:15 a.m.

CVE-2020-5554

2020-03-2502:15:11
CWE-22
web.nvd.nist.gov
19
cve-2020-5554
directory traversal
shihonkanri plus goout
remote attack
arbitrary files

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.5%

Directory traversal vulnerability in Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write arbitrary files via unspecified vectors.

Affected configurations

Vulners
NVD
Node
ekakinshihonkanri_plusMatch1.5.8
OR
ekakinshihonkanri_plusMatch2.2.10
VendorProductVersionCPE
ekakinshihonkanri_plus1.5.8cpe:2.3:a:ekakin:shihonkanri_plus:1.5.8:*:*:*:*:*:*:*
ekakinshihonkanri_plus2.2.10cpe:2.3:a:ekakin:shihonkanri_plus:2.2.10:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Shihonkanri Plus GOOUT",
    "vendor": "EKAKIN",
    "versions": [
      {
        "status": "affected",
        "version": "Ver1.5.8 and Ver2.2.10"
      }
    ]
  }
]

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.5%

Related for CVE-2020-5554