by Kastro
Paper/Archive/CVE-2020-36898

CVE-2020-36898

Shenzhen Xingmeng Qihang Media Co., Ltd.Guangzhou Hefeng Automation Technology Co., Ltd. QiHang Media Web Digital Signage — QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Deletion

EPSS 2%public exploitCVSS 9.1
critical.is priorityof 100
53
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 77.8.778 × 2015.6Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file deletion vulnerability in the QH.aspx endpoint that allows remote attackers to delete files without authentication. Attackers can exploit the 'data' parameter by sending a POST request with file paths to delete arbitrary files with web server permissions using directory traversal sequences.

Affected

ProductAffectedFixed inSource
QiHang Media Web Digital Signage3.0.9–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
VulnCheck (CNA)8.8CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

exploitexploit-db.com/exploits/48749refhowfor.comexploitzeroscience.mk/en/vulnerabilities/ZSL-2020-5580.phpwriteupvulncheck.com/advisories/qihang-media-web-digital-signage-unauthenticated-arbitrary-file-deletion