Sign in

Not rated

CVE-2020-10603 WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system…

Description

WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely.

Affected products and versions

Product	Affected versions	Fixed in
WebAccess/NMS	Versions not published

The 8 CVEs of WebAccess/NMS →

CVE-2020-10619 An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's (versions prior to 3.0.2)… Not rated CVE-2020-10629 WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input Not rated CVE-2020-10631 An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's (versions prior to… Not rated CVE-2020-10625 WebAccess/NMS (versions prior to 3.0.2) allows an unauthenticated remote user to create a new admin account Not rated

Do you use WebAccess/NMS?

Track this CVE Watch WebAccess/NMS Check my SBOMs

cveye.io/en/cve/CVE-2020-10603

Timeline

Published April 9, 2020
Last modified August 4, 2024

References

www.us-cert.gov www.us-cert.gov

Track this CVE