CVE-2020-7805 — CRITICAL (9.8)

Q: What is CVE-2020-7805?

CVE-2020-7805 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An issue was discovered on KT Slim egg IML500 (R7283, R8112, R8424) and IML520 (R8112, R8368, R8411) wifi device. This issue is a command injection allowing attackers to execute arbitrary OS commands.

Q: How severe is CVE-2020-7805?

CVE-2020-7805 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Q: Is there a patch for CVE-2020-7805?

Check the references section above for vendor advisories and patch information. Affected products include: Infomark Iml500 Firmware, Infomark Iml500, Infomark Iml520 Firmware, Infomark Iml520.

Vulnerability Description

An issue was discovered on KT Slim egg IML500 (R7283, R8112, R8424) and IML520 (R8112, R8368, R8411) wifi device. This issue is a command injection allowing attackers to execute arbitrary OS commands.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Infomark	Iml500 Firmware	<= 29.8.2018
Infomark	Iml500	-
Infomark	Iml520 Firmware	<= 29.8.2018
Infomark	Iml520	-

Related Weaknesses (CWE)

CWE-78

References

http://www.infomark.co.kr/bbs/board.php?bo_table=download&wr_id=57&sfl=wr_subjecVendor Advisory
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35362Third Party Advisory
http://www.infomark.co.kr/bbs/board.php?bo_table=download&wr_id=57&sfl=wr_subjecVendor Advisory
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35362Third Party Advisory

FAQ

What is CVE-2020-7805?

CVE-2020-7805 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An issue was discovered on KT Slim egg IML500 (R7283, R8112, R8424) and IML520 (R8112, R8368, R8411) wifi device. This issue is a command injection allowing attackers to execute arbitrary OS commands.

How severe is CVE-2020-7805?

CVE-2020-7805 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2020-7805?

Check the references section above for vendor advisories and patch information. Affected products include: Infomark Iml500 Firmware, Infomark Iml500, Infomark Iml520 Firmware, Infomark Iml520.