Vulnerability Description
Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker on the adjacent network to send a specially crafted request to a specific URL, which may result in an arbitrary command execution.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Necplatforms | Aterm Sa3500G Firmware | < 3.5.9 |
| Necplatforms | Aterm Sa3500G | - |
Related Weaknesses (CWE)
References
- https://jvn.jp/en/jp/JVN55917325/index.htmlThird Party Advisory
- https://jvn.jp/jp/JVN55917325/index.htmlThird Party Advisory
- https://www.necplatforms.co.jp/product/security_ap/info_20201211.htmlVendor Advisory
- https://jvn.jp/en/jp/JVN55917325/index.htmlThird Party Advisory
- https://jvn.jp/jp/JVN55917325/index.htmlThird Party Advisory
- https://www.necplatforms.co.jp/product/security_ap/info_20201211.htmlVendor Advisory
FAQ
What is CVE-2020-5635?
CVE-2020-5635 is a vulnerability with a CVSS score of 8.8 (HIGH). Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker on the adjacent network to send a specially crafted request to a specific URL, which may result in an arbitrary command execution...
How severe is CVE-2020-5635?
CVE-2020-5635 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-5635?
Check the references section above for vendor advisories and patch information. Affected products include: Necplatforms Aterm Sa3500G Firmware, Necplatforms Aterm Sa3500G.