CVE-2020-12487

Published Dec 17, 2024

Last updated 5 months ago

Overview

Description
Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege.
Source
security@vivo.com
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
7
Impact score
5.8
Exploitability score
0.7
Vector string
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Severity
HIGH

Weaknesses

security@vivo.com
CWE-20

Social media

Hype score
Not currently trending

References

Sources include official advisories and independent security research.