CVE-2020-15862

Katalog CVE

CVSS 7.8 · High EPSS 0,38%

Kerentanan Improper Privilege Management pada net-snmp, canonical ubuntu linux +4 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root.

Rincian

Terbit di NVD

20 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 30,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/net-snmp/net-snmp/commit/77f6c60f57dba0aaea5d8ef1dd94bcd0c8e6d205 patch · advisory pihak ketiga
• https://salsa.debian.org/debian/net-snmp/-/commit/fad8725402752746daf0a751dcff19eb6aeab52e patch · advisory pihak ketiga
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965166 issue tracking · advisory pihak ketiga
• https://security-tracker.debian.org/tracker/CVE-2020-15862 advisory pihak ketiga
• https://security.gentoo.org/glsa/202008-12 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20200904-0001/ advisory pihak ketiga
• https://usn.ubuntu.com/4471-1/ advisory pihak ketiga