« Volver al listado

CVE-2020-7006

Estado: ModificadaAlta (8.4)—

Systech Corporation NDS-5000 Terminal Server, NDS/5008 (8 Port, RJ45), firmware Version 02D.30. Successful exploitation of this vulnerability could allow information disclosure, limit system availability, and may allow remote code execution.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Systech — Nds-5000 FirmwareSystech — Nds/5008rm Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-7006",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 8.4,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 1.7
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Systech Corporation NDS-5000 Terminal Server",
          "versions": [
            {
              "status": "affected",
              "version": "NDS-5000 Terminal Server, NDS/5008 (8 Port, RJ45), firmware Version 02D.30"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-03-19T20:15:12.970",
  "references": [
    {
      "url": "https://www.us-cert.gov/ics/advisories/icsa-20-079-01",
      "tags": [
        "Patch",
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://www.us-cert.gov/ics/advisories/icsa-20-079-01",
      "tags": [
        "Patch",
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "ics-cert@hq.dhs.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Systech Corporation NDS-5000 Terminal Server, NDS/5008 (8 Port, RJ45), firmware Version 02D.30. Successful exploitation of this vulnerability could allow information disclosure, limit system availability, and may allow remote code execution."
    },
    {
      "lang": "es",
      "value": "Systech Corporation NDS-5000 Terminal Server, NDS/5008 (8 puertos, RJ45), versión de firmware 02D.30. Una explotación con éxito de esta vulnerabilidad podría permitir una divulgación de información, limitar la disponibilidad del sistema y puede permitir una ejecución de código remota."
    }
  ],
  "lastModified": "2026-06-17T03:24:06.650",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:systech:nds\\/5008rm_firmware:02d.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "12CA4301-A1FD-4BC9-A9A7-A8FFAD33EB0A"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:systech:nds\\/5008rm:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "47613E24-13C8-430A-90FF-A0546688BF09"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:systech:nds-5000_firmware:02d.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C0082AA2-3EED-4DE7-8F9A-83C827C7D1FC"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:systech:nds-5000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "CF3CEE67-2622-477E-B4CC-278D4E2A5EEB"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}