by Kastro
Paper/Archive/CVE-2020-35851

CVE-2020-35851

HGiga MailSherlock MSR45/SSR45 — HGiga MailSherlock - Command Injection

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 78.0.780 × 2015.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command inject attacks remotely and execute arbitrary commands of the system.

Affected

ProductAffectedFixed inSource
MailSherlock MSR45/SSR45unspecified – < 115115CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
twcert (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reftwcert.org.tw/en/cp-139-4264-f10f4-2.html