URVE Remote Code Execution (CVE-2020-29552)

A remote code execution vulnerability exists in URVE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2020-29552

creationtimestamp| type| source ---|---|--- 2020-12-23 19:25:33+00:00| seen| https://t.me/cibsecurity/21234 2024-11-14 06:07:40+00:00| seen| MISP/6a079369-d681-4501-8900-e3e90a37e1ae...

CVE-2020-29552

URVE Build 24.03.2020 is affected by CVE-2020-29552. A vulnerability in the endpoint _internal/pc/vpro.php?mac=0&ip=0&operation=0&usr=0&pass=0%3bpowershell+-c+ allows execution of a PowerShell command and saving its output under the web root, i.e., remote code execution. Documents indicate the ex...