Paper/Archive/CVE-2020-15591

CVE-2020-15591

mitre — fexsrv in F*EX (aka Frams' Fast File EXchange) before fex-20160919_2 allows eval injection (for unauthenticated remote code execution).

EPSS 4%CVSS 9.8

critical.is priorityof 100

48

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 90.7.907 × 2018.1 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

fexsrv in F*EX (aka Frams' Fast File EXchange) before fex-20160919_2 allows eval injection (for unauthenticated remote code execution).

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reffex.rus.uni-stuttgart.de refsecfault-security.com/advisories/cve2020-15591.html refcwe.mitre.org/data/definitions/95.html