CVE-2020-5847

Warnung

Exploit

EPSS 93.51%
Veröffentlicht 16.03.2020 18:15:12
Zuletzt bearbeitet 31.10.2025 22:10:43
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Unraid through 6.8.0 allows Remote Code Execution.

Betroffene Produkte Warnungen 1 Metriken 4 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Unraid ≫ Unraid Version <= 6.8.0

03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog

Unraid Remote Code Execution Vulnerability

Schwachstelle

Unraid contains a vulnerability due to the insecure use of the extract PHP function that can be abused to execute remote code as root. This CVE is chainable with CVE-2020-5849 for initial access.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	93.51%	0.998

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H