Authentication flaw

2020-11-0607:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.8%

JSON

Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client side.

CPENameOperatorVersion
nvt_web_servereq5.0.1498

CPE	Name	Operator	Version
	nvt_web_server	eq	5.0.1498

References

github.com/summtime/CVE/tree/master/CVE-2020-28250