CVE-2020-9047CWE-347

exacqVision Software - Improper Verification of Cryptographic Signature

Medium · published June 26, 2020

CVSS v3.1
6.8
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker with administrative privileges could potentially download and run a malicious executable that could allow OS command injection on the system.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.07770 · 94.6th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2020-06-26T18:01Z
EPSS history
Timeline
  • 26 JUN 18:01Z
    exacqVision Software - Improper Verification of Cryptographic Signature
    cvelistv5