CVE-2020-5636 Information

Description

Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker with an administrative privilege to send a specially crafted request to a specific URL which may result in an arbitrary command execution.

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Reference

https://www.necplatforms.co.jp/product/security_ap/info_20201211.html https://jvn.jp/jp/JVN55917325/index.html https://jvn.jp/en/jp/JVN55917325/index.html

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction Required

HIGH

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

6.8