CVE-2020-7000CWE-922

CVE-2020-7000: vulnerability in VISAM VBASE Editor

Published · Updated

Follow this CVE+ Monitor VBASE Editor+ Monitor VBASE Web-Remote Module

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.1%
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from the web server and gain information about the login and the encryption/decryption mechanism, which may be exploited to bypass authentication of the HTML5 HMI web interface.
Affected products
VISAM · VBASE EditorVISAM · VBASE Web-Remote Module
Related CVEs — VISAM VBASE Editor

In the same product, most dangerous first.

CVE-2020-10599—CVE-2020-10599EPSS 2.6%CVE-2020-7008—CVE-2020-7008EPSS 1.9%CVE-2020-7004—CVE-2020-7004EPSS 0.4%CVE-2020-10601—CVE-2020-10601EPSS 0.3%