PT-2021-11104

CVE-2020-25037

·

Published

2021-02-02

·

Updated

2021-02-04

Description by

CVSS 3.1
8.2
High
MetricsAV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: UCOPIA Wi-Fi appliances version 6.0.5
Description: The issue allows for arbitrary code execution with admin user privileges through an escape from a restricted command.
Recommendations: For UCOPIA Wi-Fi appliances version 6.0.5, update to a version that fixes the arbitrary code execution issue to prevent exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-434: Unrestricted Upload of File with Dangerous Type
Related identifiers
CVE-2020-25037
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com