CVE-2020-9024

Name of the Vulnerable Software and Affected Versions Iteris Vantage Velocity Field Unit versions 2.3.1 through 2.4.2

Description The issue concerns world-writable permissions for certain scripts. Specifically, the /root/cleardata.pl script, which is executed as root by crond, and the /root/loadperl.sh script, which is executed as root at boot time, have world-writable permissions.

Recommendations For Iteris Vantage Velocity Field Unit version 2.3.1, update the permissions of the /root/cleardata.pl and /root/loadperl.sh scripts to prevent world-writable access. For Iteris Vantage Velocity Field Unit version 2.4.2, update the permissions of the /root/cleardata.pl and /root/loadperl.sh scripts to prevent world-writable access.