CVE-2020-3931criticalCWE-120

CVE-2020-3931: falha crítica em GeoVision Door Access Control Device

GeoVision Door Access Control Device - Buffer overflow vulnerability

Publicada em · Atualizada em

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 1.8%
probabilidade de exploração
1.8%top 23% das CVEs
exploração observada
nãonenhuma fonte reporta
Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute arbitrary command.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
GeoVision · Door Access Control Device
CVEs relacionadas — GeoVision Door Access Control Device

No mesmo produto, das mais perigosas para as menos.

CVE-2020-3928MEDIUMGeoVision Door Access Control Device - Hardcoded privileged passwordEPSS 0.9%CVE-2020-3929MEDIUMGeoVision Door Access Control Device - Shared cryptographic keysEPSS 0.5%CVE-2020-3930MEDIUMGeoVision Door Access Control Device - Information disclosure vulnerabilityEPSS 0.3%
Referências
https://www.acronis.com/en-us/blog/posts/backdoor-wide-open-critical-vulnerabilities-uncovered-geovisionhttps://www.twcert.org.tw/tw/cp-132-3754-b77d0-1.html