VISAM Automation Base (VBASE) (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to read the contents of unexpected files, escalate privileges to system level, execute arbitrary code on the targeted system, bypass security mechanisms, and discover the cryptographic key for the web login.
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-7008US | high7.5 | — | ||
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, which may allow an attacker to read arbi… | ||||
| CVE-2020-7004US | high8.8OT erhöht | — | ||
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in elevation of privileges or malicious effe… | ||||
| CVE-2020-7000US | high7.5 | — | ||
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from the web server and gain information abo… | ||||
| CVE-2020-10601US | high7.8OT erhöht | — | ||
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a local attacker to bypass the password-protec… | ||||
| CVE-2020-10599US | critical9.8 | — | ||
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buffer overflow, which may lead to a denial-… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (5)
- MitigationVBASE Editor
For more information, please contact VISAM using the information provided on their contact page.
https://www.vbase.net/en/contact.php - MitigationVBASE Editor
For more information, please contact VISAM using the information provided on their contact page.
https://www.vbase.net/en/contact.php - MitigationVBASE Editor
For more information, please contact VISAM using the information provided on their contact page.
https://www.vbase.net/en/contact.php - MitigationVBASE Editor
For more information, please contact VISAM using the information provided on their contact page.
https://www.vbase.net/en/contact.php - MitigationVBASE Editor
For more information, please contact VISAM using the information provided on their contact page.
https://www.vbase.net/en/contact.php
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan