CVE-2017-20084mediumCWE-912

CVE-2017-20084: medium-severity vulnerability in JUNG Smart Visu Server

JUNG Smart Visu Server KNX Group Address backdoor

Published · Updated

Follow this CVE+ Monitor Smart Visu Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.4%
In short

A backdoor vulnerability exists in JUNG Smart Visu Server's KNX Group Address component that allows unauthorized access. An attacker with local access can exploit this flaw to gain control of the system.

Technical detail

A backdoor condition exists in the KNX Group Address functionality of JUNG Smart Visu Server (versions 1.0.804, 1.0.830, 1.0.832) exploitable via local access, potentially allowing privilege escalation or system compromise. The vulnerability requires local presence on the affected device and impacts confidentiality and integrity of the system.

Summary generated and translated by AI from the official description.
A vulnerability has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832 and classified as critical. Affected by this vulnerability is an unknown functionality of the component KNX Group Address. The manipulation leads to backdoor. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.900 is able to address this issue. It is recommended to upgrade the affected component.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
JUNG · Smart Visu Server
Related CVEs — JUNG Smart Visu Server

In the same product, most dangerous first.

CVE-2017-20083MEDIUMJUNG Smart Visu Server SSH Server backdoorEPSS 0.4%CVE-2017-20082MEDIUMJUNG Smart Visu Server backdoorEPSS 0.4%