CVE-2020-17384

Cellopoint CelloOS - Remote Command Execution (RCE)

High · published August 25, 2020

CVSS v3.1
7.2
EPSS
2%
Percentile
79.8
In the wild
Unconfirmed
What it is

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With the cookie of the system administrator, attackers can inject and remotely execute arbitrary command to manipulate the system.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01927 · 79.8th percentile
Published
2020-08-25T07:35Z
EPSS history
Timeline
  • 25 AUG 07:35Z
    Cellopoint CelloOS - Remote Command Execution (RCE)
    cvelistv5