CVE-2020-15715

rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability using the nodeId parameter.

CVSS v3 9.9 CRITICAL
CVSS v2.0 6.5 MEDIUM

9.9^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.1 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

6.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/184941	Third Party Advisory VDB Entry
https://www.rconfig.com/downloads/v3-release-notes	Release Notes Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/184941	Third Party Advisory VDB Entry
https://www.rconfig.com/downloads/v3-release-notes	Release Notes Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:rconfig:rconfig:3.9.5:*:*:*:*:*:*:*

History

21 Nov 2024, 05:06

Type	Values Removed	Values Added
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/184941 - Third Party Advisory, VDB Entry~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/184941 - Third Party Advisory, VDB Entry
References	~~() https://www.rconfig.com/downloads/v3-release-notes - Release Notes, Vendor Advisory~~	() https://www.rconfig.com/downloads/v3-release-notes - Release Notes, Vendor Advisory

Information

Published : 2020-07-28 14:15

Updated : 2024-11-21 05:06

NVD link : CVE-2020-15715

Mitre link : CVE-2020-15715

CVE.ORG link : CVE-2020-15715

JSON object : View

Products Affected

rconfig

rconfig

CWE

NVD-CWE-noinfo

{"id": "CVE-2020-15715", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.1}]}, "published": "2020-07-28T14:15:13.733", "references": [{"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/184941", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://www.rconfig.com/downloads/v3-release-notes", "tags": ["Release Notes", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/184941", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.rconfig.com/downloads/v3-release-notes", "tags": ["Release Notes", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability using the nodeId parameter."}, {"lang": "es", "value": "rConfig versi\u00f3n 3.9.5, podr\u00eda permitir a un atacante autenticado remoto ejecutar c\u00f3digo arbitrario en el sistema, debido a un error en el script search.crud.php. Un atacante podr\u00eda aprovechar esta vulnerabilidad usando el par\u00e1metro nodeId"}], "lastModified": "2024-11-21T05:06:05.300", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rconfig:rconfig:3.9.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FD07A09E-A9CF-4B07-9B5B-B1A606B3327E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}