CVE-2020-16282

Katalog CVE

CVSS 8.8 · High EPSS 0,37%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada rangeeos. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

In the default configuration of Rangee GmbH RangeeOS 8.0.4, all components are executed in the context of the privileged root user. This may allow a local attacker to break out of the restricted environment or inject malicious code into the application and fully compromise the operating system.

Rincian

Terbit di NVD

20 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

0,37% peluang dieksploitasi; lebih tinggi dari 28,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.contextis.com/en/resources/advisories/cve-2020-16282 advisory pihak ketiga