CVE-2020-8963

The CVE-2020-8963 entry affects TimeTools SC7105/SC9205/SC9705/SR7110/SR9210/SR9750/SR9850 devices (versions around 1.0.007) and T100/T300/T550 devices (1.0.003) where remote attackers can execute arbitrary OS commands via shell metacharacters in the t3.cgi srmodel or srtime parameters. Root caus...

CVE-2020-8964

CVE-2020-8964 affects TimeTools devices (SC7105/SC9205/SC9705/SR7110/SR9210/SR9750/SR9850/T100/T300/T550). Root cause: authentication bypass via a hardcoded cookie placed in t3.cgi (t3axs=TiMEtOOlsj7G3xMm52wB). Impact: remote attacker could bypass authentication with network access, aligning with...