CVE-2020-5637 — MEDIUM (6.8)

Q: What is CVE-2020-5637?

CVE-2020-5637 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Improper validation of integrity check value vulnerability in Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker with an administrative privilege to execute a malicious program.

Q: How severe is CVE-2020-5637?

CVE-2020-5637 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2020-5637?

Check the references section above for vendor advisories and patch information. Affected products include: Necplatforms Aterm Sa3500G Firmware, Necplatforms Aterm Sa3500G.

Vulnerability Description

Improper validation of integrity check value vulnerability in Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker with an administrative privilege to execute a malicious program.

CVSS Score

6.8

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Necplatforms	Aterm Sa3500G Firmware	< 3.5.9
Necplatforms	Aterm Sa3500G	-

Related Weaknesses (CWE)

CWE-354

References

https://jvn.jp/en/jp/JVN55917325/index.htmlThird Party Advisory
https://jvn.jp/jp/JVN55917325/index.htmlThird Party Advisory
https://www.necplatforms.co.jp/product/security_ap/info_20201211.htmlVendor Advisory
https://jvn.jp/en/jp/JVN55917325/index.htmlThird Party Advisory
https://jvn.jp/jp/JVN55917325/index.htmlThird Party Advisory
https://www.necplatforms.co.jp/product/security_ap/info_20201211.htmlVendor Advisory

FAQ

What is CVE-2020-5637?

CVE-2020-5637 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Improper validation of integrity check value vulnerability in Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker with an administrative privilege to execute a malicious program.

How severe is CVE-2020-5637?

CVE-2020-5637 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-5637?

Check the references section above for vendor advisories and patch information. Affected products include: Necplatforms Aterm Sa3500G Firmware, Necplatforms Aterm Sa3500G.