CVE-2020-8964

🗓️ 13 Feb 2020 02:56:32Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 79 Views

CVE-2020-8964: TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300 1.0.003, and T550 1.0.003 devices allow remote attackers to bypass authentication by placing t3axs=TiMEtOOlsj7G3xMm52wB in a t3.cgi request, aka a "hardcoded cookie.

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2020-8964	13 Feb 202002:56	–	cvelist
EUVD	EUVD-2020-29794	7 Oct 202500:30	–	euvd
NVD	CVE-2020-8964	13 Feb 202003:15	–	nvd
Prion	Hardcoded credentials	13 Feb 202003:15	–	prion
RedhatCVE	CVE-2020-8964	22 May 202516:53	–	redhatcve

NVD

Node

timetoolsltd sr9850_firmwareMatch1.0.007

AND

timetoolsltd sr9850Match-

Node

timetoolsltd sr9750_firmwareMatch1.0.007

AND

timetoolsltd sr9750Match-

Node

timetoolsltd sc9705_firmwareMatch1.0.007

AND

timetoolsltd sc9705Match-

Node

timetoolsltd sr9210_firmwareMatch1.0.007

AND

timetoolsltd sr9210Match-

Node

timetoolsltd sc9205_firmwareMatch1.0.007

AND

timetoolsltd sc9205Match-

Node

timetoolsltd sr7110_firmwareMatch1.0.007

AND

timetoolsltd sr7110Match-

Node

timetoolsltd sc7105_firmwareMatch1.0.007

AND

timetoolsltd sc7105Match-

Node

timetoolsltd t100_firmwareMatch1.0.003

AND

timetoolsltd t100Match-

Node

timetoolsltd t300_firmwareMatch1.0.003

AND

timetoolsltd t300Match-

Node

timetoolsltd t550_firmwareMatch1.0.003

AND

timetoolsltd t550Match-

Source	Link
sku11army	www.sku11army.blogspot.com/2020/02/timetools-sr-sc-series-network-time.html

21 Nov 2024 05:39Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.8

CVSS 210

EPSS0.0293

cve-2020-8964 timetools sc7105 sc9205 sc9705 sr7110 sr9210 sr9750 sr9850 t100 t300 t550 remote attackers authentication bypass hardcoded cookie