CVE-2020-8964
Estado: ModificadaCrítica (9.8)—
TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300 1.0.003, and T550 1.0.003 devices allow remote attackers to bypass authentication by placing t3axs=TiMEtOOlsj7G3xMm52wB in a t3.cgi request, aka a "hardcoded cookie."
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 9.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 3.66%
- Percentil entre todas las CVEs puntuadas: 89
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (10)
CWE
- CWE-798
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2020-8964",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 10,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2020-02-13T03:15:10.750",
"references": [
{
"url": "https://sku11army.blogspot.com/2020/02/timetools-sr-sc-series-network-time.html",
"tags": [
"Exploit",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://sku11army.blogspot.com/2020/02/timetools-sr-sc-series-network-time.html",
"tags": [
"Exploit",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-798"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300 1.0.003, and T550 1.0.003 devices allow remote attackers to bypass authentication by placing t3axs=TiMEtOOlsj7G3xMm52wB in a t3.cgi request, aka a \"hardcoded cookie.\""
},
{
"lang": "es",
"value": "Los dispositivos TimeTools SC7105 versiones 1.0.007, SC9205 versiones 1.0.007, SC9705 versiones 1.0.007, SR7110 versiones 1.0.007, SR9210 versiones 1.0.007, SR9750 versiones 1.0.007, SR9850 versiones 1.0.007, T100 versiones 1.0.003, T300 versiones 1.0.003 y T550 versiones 1.0.003, permiten a atacantes remotos omitir la autenticación colocando t3axs=TiMEtOOlsj7G3xMm52wB en una petición del archivo t3.cgi, también se conoce como \"hardcoded cookie\"."
}
],
"lastModified": "2026-06-17T03:27:16.503",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:timetoolsltd:sr9850_firmware:1.0.007:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4BA093B-BFE0-42E6-BC50-DF3BC0037AC0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:timetoolsltd:sr9850:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6DEA1A7A-EDE5-48EF-AF90-A68D46C400F5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:timetoolsltd:sr9750_firmware:1.0.007:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9864C3F0-BADF-47DC-9D91-393CA2E77BFD"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:timetoolsltd:sr9750:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "486174F6-4970-48D7-B413-D9FDF0F2BF2D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:timetoolsltd:sc9705_firmware:1.0.007:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3A1DD36-83DC-44CB-8367-EFF13837C5AC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:timetoolsltd:sc9705:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5515061E-7463-4C1B-B6B5-9B11B3DB208A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:timetoolsltd:sr9210_firmware:1.0.007:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7EF31F0E-EA17-495A-9FD9-64B00BD8C086"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:timetoolsltd:sr9210:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "627E8860-24A2-4F97-B5F6-B3D47F80655E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:timetoolsltd:sc9205_firmware:1.0.007:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0084D631-8EC9-4D2D-AABD-ED3408628877"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:timetoolsltd:sc9205:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6D7612F0-7707-40DB-A6BC-DDC528AA6F55"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:timetoolsltd:sr7110_firmware:1.0.007:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E81496D8-189E-4532-B1EA-E302264D47CA"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:timetoolsltd:sr7110:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C356C55B-89A2-4DE0-A8FD-809EA139B2E4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:timetoolsltd:sc7105_firmware:1.0.007:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FDB66C22-153E-4A53-B45E-BD3560DADD09"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:timetoolsltd:sc7105:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "137A4B04-0550-44BA-9F08-DAC509566D1F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:timetoolsltd:t100_firmware:1.0.003:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D94F389F-FAC8-4841-9D57-44FDE0CA980D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:timetoolsltd:t100:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "14849984-FF21-4CD4-927C-12138249C75A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:timetoolsltd:t300_firmware:1.0.003:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "375096FB-4860-43BC-9E5E-15B1BEC913B2"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:timetoolsltd:t300:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B62FD3BB-71AA-4112-82DB-88E123ECE210"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:timetoolsltd:t550_firmware:1.0.003:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED3B5801-1982-4010-A120-3FA10D3BDF0B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:timetoolsltd:t550:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9440D9AB-BA9F-4B0C-A8C6-CF44CC005CCB"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}