CVE-2020-29659

A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings= attack...

CVE-2020-29659

creationtimestamp| type| source ---|---|--- 2020-12-09 20:32:48+00:00| seen| https://t.me/cibsecurity/17999 2020-12-09 20:35:50+00:00| seen| https://t.me/cibsecurity/18019 2020-12-09 20:44:42+00:00| seen| https://t.me/cibsecurity/18038 2020-12-09 21:02:27+00:00| seen| https://t.me/cibsecurity/180...

CVE-2020-29659

CVE-2020-29659 affects Flexense DupScout Enterprise 10.0.18, where a buffer overflow in the web server allows remote, unauthenticated code execution as SYSTEM by overflowing the sid parameter through GET /settings&sid=. The issue stems from improper handling of the sid parameter in the web server...