CVE-2020-25035

Medium

6.7/10

Summary

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with root privileges using chroothole_client's PHP call, a related issue to CVE-2017-11322.

Attack Complexity: LOW
Attack Vector: LOCAL
Integrity Impact: HIGH
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: HIGH
Confidentiality Impact: HIGH
Availability Impact: HIGH

References

Advisory Timeline

Published Feb 02, 2021

CVE-2020-25035

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS