Lucene search

[email protected]CVE-2020-8964

HistoryFeb 13, 2020 - 3:15 a.m.

CVE-2020-8964

2020-02-1303:15:00

CWE-798

[email protected]

web.nvd.nist.gov

cve-2020-8964

timetools

sc7105

sc9205

sc9705

sr7110

sr9210

sr9750

sr9850

t100

t300

t550

remote attackers

authentication bypass

hardcoded cookie

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.016 Low

EPSS

Percentile

87.3%

JSON

TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300 1.0.003, and T550 1.0.003 devices allow remote attackers to bypass authentication by placing t3axs=TiMEtOOlsj7G3xMm52wB in a t3.cgi request, aka a “hardcoded cookie.”

CPENameOperatorVersion
timetoolsltd:sr9850_firmwaretimetoolsltd sr9850 firmwareeq1.0.007
timetoolsltd:sr9750_firmwaretimetoolsltd sr9750 firmwareeq1.0.007
timetoolsltd:sc9705_firmwaretimetoolsltd sc9705 firmwareeq1.0.007
timetoolsltd:sr9210_firmwaretimetoolsltd sr9210 firmwareeq1.0.007
timetoolsltd:sc9205_firmwaretimetoolsltd sc9205 firmwareeq1.0.007
timetoolsltd:sr7110_firmwaretimetoolsltd sr7110 firmwareeq1.0.007
timetoolsltd:sc7105_firmwaretimetoolsltd sc7105 firmwareeq1.0.007
timetoolsltd:t100_firmwaretimetoolsltd t100 firmwareeq1.0.003
timetoolsltd:t300_firmwaretimetoolsltd t300 firmwareeq1.0.003
timetoolsltd:t550_firmwaretimetoolsltd t550 firmwareeq1.0.003

CPE	Name	Operator	Version
timetoolsltd:sr9850_firmware	timetoolsltd sr9850 firmware	eq	1.0.007
timetoolsltd:sr9750_firmware	timetoolsltd sr9750 firmware	eq	1.0.007
timetoolsltd:sc9705_firmware	timetoolsltd sc9705 firmware	eq	1.0.007
timetoolsltd:sr9210_firmware	timetoolsltd sr9210 firmware	eq	1.0.007
timetoolsltd:sc9205_firmware	timetoolsltd sc9205 firmware	eq	1.0.007
timetoolsltd:sr7110_firmware	timetoolsltd sr7110 firmware	eq	1.0.007
timetoolsltd:sc7105_firmware	timetoolsltd sc7105 firmware	eq	1.0.007
timetoolsltd:t100_firmware	timetoolsltd t100 firmware	eq	1.0.003
timetoolsltd:t300_firmware	timetoolsltd t300 firmware	eq	1.0.003
timetoolsltd:t550_firmware	timetoolsltd t550 firmware	eq	1.0.003

References

sku11army.blogspot.com/2020/02/timetools-sr-sc-series-network-time.html

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.016 Low

EPSS

Percentile

87.3%

JSON

Related for CVE-2020-8964

prion1 cvelist1