CVE-2020-7980observed exploitation

CVE-2020-7980

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

84Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actepss 83%
from disclosure to weapon3 days
Published on NVDJan 25
1st PoC+3d
VulnCheck+1390d
Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.