CVE-2020-13656

Katalog CVE

CVSS 9.8 · Critical EPSS 2,1%

Kerentanan Out-of-bounds Read pada morganstanley hobbes. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

In Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking, allowing exploitation of an out-of-bounds (OOB) read/write vulnerability that leads to both local and remote code (via RPC) execution.

Rincian

Terbit di NVD

12 Juni 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read
CWE-787: Out-of-bounds Write

EPSS (30 hari)

2,1% peluang dieksploitasi; lebih tinggi dari 81,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://know.bishopfox.com/advisories/oob-to-rce-exploitation-of-the-hobbes-functional-interpreter exploit · deskripsi teknis · advisory pihak ketiga