Arbitrary file upload in Evertz 3080ipx
CVE-2020-22159
EVERTZ devices 3080IPX exe-guest-v1.2-r26125, 7801FC 1.3 Build 27, and 7890IXG V494 are vulnerable to Arbitrary File Upload, allowing an authenticated attacker to upload a webshell or overwrite any critical system files.
Vulnerability class: Unrestricted File Upload
EPSS: 0.010 (58.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Evertz 3080ipx
- Evertz 3080ipx_firmware — versions exe-guest-v1.2-r26125
- Evertz 7801fc
- Evertz 7801fc_firmware — versions 1.3
- Evertz 7890ixg
- Evertz 7890ixg_firmware — versions v494
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Permissions Required)
- cve@mitre.org (Exploit)
Frequently asked questions
- What is CVE-2020-22159?
- CVE-2020-22159 is a high-severity vulnerability in Evertz 3080ipx, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 8.8/10. Published 2023-07-18.
- How severe is CVE-2020-22159?
- High severity. CVSS v3 base score is 8.8 out of 10.