CVE-2020-25842

—

CVSS 3.1

7.5 high

EPSS

<1%p41

Published

Dec 31, 2020 (Dec 31, 2020)

Modified

Jun 17, 2026

Description

The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without privilege.

Vendors: panorama
Products: nhiservisignadapter
Weakness: CWE-311
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.