Lucene search

[email protected]CVE-2020-8963

HistoryFeb 13, 2020 - 3:15 a.m.

CVE-2020-8963

2020-02-1303:15:00

CWE-78

[email protected]

web.nvd.nist.gov

cve

2020

8963

timetools

sc7105

sc9205

sc9705

sr7110

sr9210

sr9750

t100

t300

t550

remote attackers

arbitrary os commands

shell metacharacters

t3.cgi

srmodel

srtime

parameter

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.069 Low

EPSS

Percentile

93.9%

JSON

TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300 1.0.003, and T550 1.0.003 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the t3.cgi srmodel or srtime parameter.

CPENameOperatorVersion
timetoolsltd:sr9850_firmwaretimetoolsltd sr9850 firmwareeq1.0.007
timetoolsltd:sr9750_firmwaretimetoolsltd sr9750 firmwareeq1.0.007
timetoolsltd:sc9705_firmwaretimetoolsltd sc9705 firmwareeq1.0.007
timetoolsltd:sr9210_firmwaretimetoolsltd sr9210 firmwareeq1.0.007
timetoolsltd:sc9205_firmwaretimetoolsltd sc9205 firmwareeq1.0.007
timetoolsltd:sr7110_firmwaretimetoolsltd sr7110 firmwareeq1.0.007
timetoolsltd:sc7105_firmwaretimetoolsltd sc7105 firmwareeq1.0.007
timetoolsltd:t100_firmwaretimetoolsltd t100 firmwareeq1.0.003
timetoolsltd:t300_firmwaretimetoolsltd t300 firmwareeq1.0.003
timetoolsltd:t550_firmwaretimetoolsltd t550 firmwareeq1.0.003

CPE	Name	Operator	Version
timetoolsltd:sr9850_firmware	timetoolsltd sr9850 firmware	eq	1.0.007
timetoolsltd:sr9750_firmware	timetoolsltd sr9750 firmware	eq	1.0.007
timetoolsltd:sc9705_firmware	timetoolsltd sc9705 firmware	eq	1.0.007
timetoolsltd:sr9210_firmware	timetoolsltd sr9210 firmware	eq	1.0.007
timetoolsltd:sc9205_firmware	timetoolsltd sc9205 firmware	eq	1.0.007
timetoolsltd:sr7110_firmware	timetoolsltd sr7110 firmware	eq	1.0.007
timetoolsltd:sc7105_firmware	timetoolsltd sc7105 firmware	eq	1.0.007
timetoolsltd:t100_firmware	timetoolsltd t100 firmware	eq	1.0.003
timetoolsltd:t300_firmware	timetoolsltd t300 firmware	eq	1.0.003
timetoolsltd:t550_firmware	timetoolsltd t550 firmware	eq	1.0.003

References

sku11army.blogspot.com/2020/02/timetools-sr-sc-series-network-time.html

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.069 Low

EPSS

Percentile

93.9%

JSON

Related for CVE-2020-8963

prion1 cvelist1