What is CVE-2020-8797?

CVE-2020-8797 is a medium-severity vulnerability in Juplink Rx4-1500, classified under OS Command Injection. CVSS score: 6.7/10. Published 2020-04-23.

How severe is CVE-2020-8797?

Medium severity. CVSS v3 base score is 6.7 out of 10.

RCE in Juplink Rx4-1500

CVE-2020-8797

Juplink RX4-1500 v1.0.3 allows remote attackers to gain root access to the Linux subsystem via an unsanitized exec call (aka Command Line Injection), if the undocumented telnetd service is enabled and the attacker can authenticate as admin…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.009 (56.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Juplink Rx4-1500
Juplink Rx4-1500_firmware — versions 1.0.3
N/a — versions n/a

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-8797?: CVE-2020-8797 is a medium-severity vulnerability in Juplink Rx4-1500, classified under OS Command Injection. CVSS score: 6.7/10. Published 2020-04-23.
How severe is CVE-2020-8797?: Medium severity. CVSS v3 base score is 6.7 out of 10.