Iteris Apache Velocity 安全漏洞

Iteris Apache Velocity is a software application from the United States Iteris. It is used to create and maintain the open source software functionality associated with the Apache Velocity Engine. A security vulnerability exists in Apache Velocity Engine versions up to 2.2, which can be exploited...

VulnCheck KEV: CVE-2020-9020

Iteris Vantage Velocity Field Unit 2.3.1, 2.4.2, and 3.0 devices allow the injection of OS commands into cgi-bin/timeconfig.py via shell metacharacters in the NTP Server field...

CVE-2020-9024

Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have world-writable permissions for the /root/cleardata.pl executed as root by crond and /root/loadperl.sh executed as root at boot time scripts...