What is CVE-2020-9000?

CVE-2020-9000 is a high-severity vulnerability in Iportalis Control Portal, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2021-09-01.

How severe is CVE-2020-9000?

High severity. CVSS v3 base score is 7.5 out of 10.

Resource exhaustion in Iportalis Control Portal

CVE-2020-9000

An issue was discovered in iPortalis iCS 7.1.13.0. Attackers can send a sequence of requests to rapidly cause .NET Input Validation errors. This increases the size of the log file on the remote server until memory is exhausted, therefore consuming the maximum amount of resources (triggering a denial of service condition).

Vulnerability class: DoS (Denial of Service)

EPSS: 0.011 (61.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Iportalis Iportalis_control_portal — versions 7.1.13.0
N/a — versions n/a

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-9000?: CVE-2020-9000 is a high-severity vulnerability in Iportalis Control Portal, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2021-09-01.
How severe is CVE-2020-9000?: High severity. CVSS v3 base score is 7.5 out of 10.