CVE-2020-27285

2021-01-0615:01:44

CWE-306

icscert

www.cve.org

9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.0%

JSON

The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read and modify the database without authentication.

CNA Affected

[
  {
    "product": "Crimson 3.1",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Build versions prior to 3119.001"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-005-04