ZeroHour

CVE-2020-13896

PoC
CVSS 3.1
5.3 medium
EPSS
15%p96
Published
()
Modified
Description

The web interface of Maipu MP1800X-50 7.5.3.14(R) devices allows remote attackers to obtain sensitive information via the form/formDeviceVerGet URI, such as system id, hardware model, hardware version, bootloader version, software version, software image file, compilation time, and system uptime. This is similar to CVE-2019-1653.

Vendors
maipu
Products
mp1800x-50 firmware
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

In the news

No ingested article mentions this CVE yet.