CVE-2020-25010

2020-12-1703:37:37

mitre

www.cve.org

vulnerability

kyland kps2204

remote attackers

upload malicious script

post request

payload

file write

AI Score

9.7

Confidence

High

EPSS

0.013

Percentile

86.2%

JSON

An arbitrary code execution vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers Software Version:R0002.P05 allows remote attackers to upload a malicious script file by constructing a POST type request and writing a payload in the request parameters as an instruction to write a file.