5.5
CVE-2020-27690
- EPSS 0.05%
- Veröffentlicht 04.11.2020 21:15:12
- Zuletzt bearbeitet 21.11.2024 05:21:39
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginThe Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains a buffer overflow within its web management portal. When a POST request is sent to /boaform/admin/formDOMAINBLK with a large blkDomain value, the Boa server crashes.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Imomobile ≫ Verve Connect Vh510 Firmware Version < 1.0.1.6l0516
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.05% | 0.128 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 4.9 | 3.9 | 6.9 |
AV:L/AC:L/Au:N/C:N/I:N/A:C
|
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.