Vulnerability Description
UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands or cause a denial-of-service (DoS) condition by sending a specially crafted request to a specific URL.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nec | Univerge Sv9500 Firmware | >= v1, <= v7 |
| Nec | Univerge Sv9500 | - |
| Nec | Univerge Sv8500 Firmware | >= s6, <= s8 |
| Nec | Univerge Sv8500 | - |
Related Weaknesses (CWE)
References
- https://jvn.jp/en/jp/JVN38784555/index.htmlThird Party Advisory
- https://www.necplatforms.co.jp/en/press/security_adv.htmlVendor Advisory
- https://jvn.jp/en/jp/JVN38784555/index.htmlThird Party Advisory
- https://www.necplatforms.co.jp/en/press/security_adv.htmlVendor Advisory
FAQ
What is CVE-2020-5685?
CVE-2020-5685 is a vulnerability with a CVSS score of 9.8 (CRITICAL). UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands or cause a denial-of-service (DoS) condition by sending a specially crafted requ...
How severe is CVE-2020-5685?
CVE-2020-5685 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-5685?
Check the references section above for vendor advisories and patch information. Affected products include: Nec Univerge Sv9500 Firmware, Nec Univerge Sv9500, Nec Univerge Sv8500 Firmware, Nec Univerge Sv8500.