PT-2020-14775
CVE-2020-16147
·
Published
2020-09-24
·
Updated
2022-04-28
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Telmat AccessLog versions prior to 6.0 (TAL 20180415)
Description
The issue allows an attacker to gain root shell access through unauthenticated code injection over the network, specifically targeting the login page.
Recommendations
For Telmat AccessLog versions prior to 6.0 (TAL 20180415), consider disabling the login page functionality until a patch is available to prevent unauthenticated code injection attacks.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾