Lucene search

K
nvd[email protected]NVD:CVE-2020-9272
HistoryFeb 20, 2020 - 4:15 p.m.

CVE-2020-9272

2020-02-2016:15:11
CWE-125
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.8%

ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c cap_to_text function.

Affected configurations

NVD
Node
proftpdproftpdRange<1.3.6c
Node
siemenssimatic_net_cp_1543-1Match-
AND
siemenssimatic_net_cp_1543-1_firmwareRange<3.0
Node
siemenssimatic_net_cp_1545-1Match-
AND
siemenssimatic_net_cp_1545-1_firmware
Node
opensusebackports_sleMatch15.0-
OR
opensusebackports_sleMatch15.0sp1
OR
opensuseleapMatch15.1

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.8%