VISAM Automation Base (VBASE) (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to read the contents of unexpected files, escalate privileges to system level, execute arbitrary code on the targeted system, bypass security mechanisms, and discover the cryptographic key for the web login.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-7008US | high7.5 | — | ||
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, which may allow an attacker to read arbi… | ||||
| CVE-2020-7004US | high8.8OT elevated | — | ||
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in elevation of privileges or malicious effe… | ||||
| CVE-2020-7000US | high7.5 | — | ||
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from the web server and gain information abo… | ||||
| CVE-2020-10601US | high7.8OT elevated | — | ||
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a local attacker to bypass the password-protec… | ||||
| CVE-2020-10599US | critical9.8 | — | ||
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buffer overflow, which may lead to a denial-… | ||||
references
External citations — patches, advisories, analysis.
remediations (5)
- MitigationVBASE Editor
For more information, please contact VISAM using the information provided on their contact page.
https://www.vbase.net/en/contact.php - MitigationVBASE Editor
For more information, please contact VISAM using the information provided on their contact page.
https://www.vbase.net/en/contact.php - MitigationVBASE Editor
For more information, please contact VISAM using the information provided on their contact page.
https://www.vbase.net/en/contact.php - MitigationVBASE Editor
For more information, please contact VISAM using the information provided on their contact page.
https://www.vbase.net/en/contact.php - MitigationVBASE Editor
For more information, please contact VISAM using the information provided on their contact page.
https://www.vbase.net/en/contact.php
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan