What is CVE-2020-11496?

CVE-2020-11496 is a medium-severity vulnerability in Sprecher-automation Sprecon-e, classified under Improper Input Validation. CVSS score: 6.7/10. Published 2020-10-19.

How severe is CVE-2020-11496?

Medium severity. CVSS v3 base score is 6.7 out of 10.

RCE in Sprecher-automation Sprecon-e

CVE-2020-11496

Sprecher SPRECON-E firmware prior to 8.64b might allow local attackers with access to engineering data to insert arbitrary code. This firmware lacks the validation of the input values on the device side, which is provided by the engineerin…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.003 (23.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Sprecher-automation Sprecon-e
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation
CWE-77 — Command Injection

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-11496?: CVE-2020-11496 is a medium-severity vulnerability in Sprecher-automation Sprecon-e, classified under Improper Input Validation. CVSS score: 6.7/10. Published 2020-10-19.
How severe is CVE-2020-11496?: Medium severity. CVSS v3 base score is 6.7 out of 10.