Lucene search

K
nvd[email protected]NVD:CVE-2020-11955
HistoryJul 14, 2020 - 2:15 p.m.

CVE-2020-11955

2020-07-1414:15:17
CWE-276
web.nvd.nist.gov
3

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

44.1%

An issue was discovered on Rittal PDU-3C002DEC through 5.15.70 and CMCIII-PU-9333E0FB through 3.15.70 devices. There are insecure permissions.

Affected configurations

Nvd
Node
rittalcmciii-pu-9333e0fb_firmwareRange3.15.70
AND
rittalcmciii-pu-9333e0fbMatch-
Node
rittalpdu-3c002dec_firmwareRange5.15.70
AND
rittalpdu-3c002decMatch-
Node
rittalcmc_iii_pu_7030.000_firmwareRange3.15.70_4
AND
rittalcmc_iii_pu_7030.000Match-
Node
rittallcp-cw_firmwareRange3.15.70_4
AND
rittallcp-cwMatch-
Node
rittaliot_interface_3124.300Range6.17.00
VendorProductVersionCPE
rittalcmciii-pu-9333e0fb_firmware*cpe:2.3:o:rittal:cmciii-pu-9333e0fb_firmware:*:*:*:*:*:*:*:*
rittalcmciii-pu-9333e0fb-cpe:2.3:h:rittal:cmciii-pu-9333e0fb:-:*:*:*:*:*:*:*
rittalpdu-3c002dec_firmware*cpe:2.3:o:rittal:pdu-3c002dec_firmware:*:*:*:*:*:*:*:*
rittalpdu-3c002dec-cpe:2.3:h:rittal:pdu-3c002dec:-:*:*:*:*:*:*:*
rittalcmc_iii_pu_7030.000_firmware*cpe:2.3:o:rittal:cmc_iii_pu_7030.000_firmware:*:*:*:*:*:*:*:*
rittalcmc_iii_pu_7030.000-cpe:2.3:h:rittal:cmc_iii_pu_7030.000:-:*:*:*:*:*:*:*
rittallcp-cw_firmware*cpe:2.3:o:rittal:lcp-cw_firmware:*:*:*:*:*:*:*:*
rittallcp-cw-cpe:2.3:h:rittal:lcp-cw:-:*:*:*:*:*:*:*
rittaliot_interface_3124.300*cpe:2.3:a:rittal:iot_interface_3124.300:*:*:*:*:*:*:*:*

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

44.1%

Related for NVD:CVE-2020-11955