CVE-2020-7847

🗓️ 23 Feb 2021 15:39:06Reported by krcertType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 43 Views

The ipTIME NAS product allows arbitrary file upload vulnerability, leading to remote code execution

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2020-7847	23 Feb 202118:35	–	circl
CNNVD	ipTIME NAS Code Issue Vulnerability	23 Feb 202100:00	–	cnnvd
Cvelist	CVE-2020-7847	23 Feb 202115:39	–	cvelist
EUVD	EUVD-2020-28779	7 Oct 202500:30	–	euvd
NVD	CVE-2020-7847	23 Feb 202116:15	–	nvd
Prion	Remote code execution	23 Feb 202116:15	–	prion
RedhatCVE	CVE-2020-7847	9 Jan 202608:36	–	redhatcve

NVD

Node

iptime nas-i_firmwareRange<1.4.36

AND

iptime nas-iMatch-

Node

iptime nas-ii_firmwareRange<1.4.36

AND

iptime nas-iiMatch-

Node

iptime nas-iie_firmwareRange<1.4.36

AND

iptime nas-iieMatch-

Node

iptime nas101_firmwareRange<1.4.36

AND

iptime nas101Match-

Node

iptime nas1dual_firmwareRange<1.4.36

AND

iptime nas1dualMatch-

Node

iptime nas2dual_firmwareRange<1.4.36

AND

iptime nas2dualMatch-

Node

iptime nas3_firmwareRange<1.4.36

AND

iptime nas3Match-

Node

iptime nas4_firmwareRange<1.4.36

AND

iptime nas4Match-

Node

iptime nas4dual_firmwareRange<1.4.36

AND

iptime nas4dualMatch-

[
  {
    "product": "ipTIME NAS",
    "vendor": "EFM Networks",
    "versions": [
      {
        "status": "affected",
        "version": "1.4.36"
      }
    ]
  }
]

Source	Link
boho	www.boho.or.kr/krcert/secNoticeView.do

21 Nov 2024 05:37Current

8.3High risk

Vulners AI Score8.3

CVSS 25.2

CVSS 3.17.4 - 8

EPSS0.00267

CWE-434