CVE-2020-24057

Name of the Vulnerable Software and Affected Versions Verint S5120FD Verint FW 0 42

Description The management website of the Verint S5120FD unit has a CGI endpoint, 'ipfilter.cgi', which is vulnerable to command injection. An authenticated attacker can exploit this issue to execute arbitrary commands as 'root'.

Recommendations For Verint S5120FD Verint FW 0 42, as a temporary workaround, consider disabling access to the 'ipfilter.cgi' endpoint until a patch is available. Restrict access to the management website to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.