« Volver al listado

CVE-2020-22159

Estado: ModificadaAlta (8.8)—

EVERTZ devices 3080IPX exe-guest-v1.2-r26125, 7801FC 1.3 Build 27, and 7890IXG V494 are vulnerable to Arbitrary File Upload, allowing an authenticated attacker to upload a webshell or overwrite any critical system files.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Evertz — 3080ipx FirmwareEvertz — 7801fc FirmwareEvertz — 7890ixg Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-22159",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2020-22159",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-28T18:42:30.996801Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:h:evertz:3080ipx:-:*:*:*:*:*:*:*"
          ],
          "vendor": "evertz",
          "product": "3080ipx",
          "versions": [
            {
              "status": "affected",
              "version": "exe-guest-v1.2-r26125"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:h:evertz:7801fc:-:*:*:*:*:*:*:*"
          ],
          "vendor": "evertz",
          "product": "7801fc",
          "versions": [
            {
              "status": "affected",
              "version": "1.3_build_27"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:h:evertz:7890ixg:-:*:*:*:*:*:*:*"
          ],
          "vendor": "evertz",
          "product": "7890ixg",
          "versions": [
            {
              "status": "affected",
              "version": "v494"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2023-07-18T18:15:11.503",
  "references": [
    {
      "url": "https://cacharros-inthewild.blogspot.com/2023/07/the-3080ipx-is-integrated-multicast.html",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://sku11army.blogspot.com/2020/02/evertz-path-transversal-arbitrary-file.html",
      "tags": [
        "Permissions Required"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://cacharros-inthewild.blogspot.com/2023/07/the-3080ipx-is-integrated-multicast.html",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://sku11army.blogspot.com/2020/02/evertz-path-transversal-arbitrary-file.html",
      "tags": [
        "Permissions Required"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-434"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "EVERTZ devices 3080IPX exe-guest-v1.2-r26125, 7801FC 1.3 Build 27, and 7890IXG V494 are vulnerable to Arbitrary File Upload, allowing an authenticated attacker to upload a webshell or overwrite any critical system files."
    }
  ],
  "lastModified": "2026-06-17T03:04:08.430",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:evertz:3080ipx_firmware:exe-guest-v1.2-r26125:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6AB78AA7-7295-40C6-BE8D-649106E6A1E1"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:evertz:3080ipx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "515F7FB9-E566-4EC7-BA27-B812FAEB6C14"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:evertz:7801fc_firmware:1.3:build_27:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7BA40CD6-6144-4F78-8C75-EE3182A9563C"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:evertz:7801fc:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B1F3D40F-17F9-4140-9CB9-DD096431CBB4"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:evertz:7890ixg_firmware:v494:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D788AC07-E6B3-4EC2-9032-EF3EE6F5A0FC"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:evertz:7890ixg:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "CB82BCE7-6820-4C1A-B158-B8C073092371"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}