CVE-2020-5685

2021-01-1309:40:35

jpcert

www.cve.org

univerge sv9500

sv8500

command execution

dos

vulnerability

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

64.8%

JSON

UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands or cause a denial-of-service (DoS) condition by sending a specially crafted request to a specific URL.

CNA Affected

[
  {
    "product": "UNIVERGE SV9500/SV8500 series",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "SV9500 series from V1 to V7and SV8500 series from S6 to S8"
      }
    ]
  }
]