Paper/Archive/CVE-2020-36912

CVE-2020-36912

Plexus Plexus anblick Digital Signage Management — Plexus anblick Digital Signage Management 3.1.13 Open Redirect via Pagina Parameter

EPSS 0.4%public exploit CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 37.8.378 × 207.6 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

Plexus anblick Digital Signage Management 3.1.13 contains an open redirect vulnerability in the 'PantallaLogin' script that allows attackers to manipulate the 'pagina' GET parameter. Attackers can craft malicious links that redirect users to arbitrary websites by exploiting improper input validation in the parameter.

Affected

ProductAffectedFixed inSource

Plexus anblick Digital Signage Management3.1.13–CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

VulnCheck (CNA)5.1CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

writeupzeroscience.mk/en/vulnerabilities/ZSL-2020-5573.php exploitpacketstormsecurity.com/files/158473 refexchange.xforce.ibmcloud.com/vulnerabilities/185521 refplexus.es writeupvulncheck.com/advisories/plexus-anblick-digital-signage-management-open-redirect-via-pagina-parameter