CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-16134

An issue was discovered on Swisscom Internet Box 2, Internet Box Standard, Internet Box Plus prior to 10.04.38, Internet Box 3 prior to 11.01.20, and Internet Box light prior to 08.06.06. Given the (user-configurable) credentials for the local Web interface or physical access to a device's plus or reset button, an attacker can create a user with elevated privileges on the Sysbus-API. This can then be used to modify local or remote SSH access, thus allowing a login session as the superuser.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 33.7%

CVSS Severity

CVSS v3 Score 8.0

CVSS v2 Score 7.7

References

Products affected by CVE-2020-16134

Swisscom » Internet-Box 2 » Version: N/A

cpe:2.3:h:swisscom:internet-box_2:-
Swisscom » Internet-Box 3 » Version: N/A

cpe:2.3:h:swisscom:internet-box_3:-
Swisscom » Internet-Box Light » Version: N/A

cpe:2.3:h:swisscom:internet-box_light:-
Swisscom » Internet-Box Plus » Version: N/A

cpe:2.3:h:swisscom:internet-box_plus:-
Swisscom » Internet-Box Standard » Version: N/A

cpe:2.3:h:swisscom:internet-box_standard:-
Swisscom » Internet-Box 2 Firmware » Version: N/A

cpe:2.3:o:swisscom:internet-box_2_firmware:-
Swisscom » Internet-Box 2 Firmware » Version: 09.00.60

cpe:2.3:o:swisscom:internet-box_2_firmware:09.00.60
Swisscom » Internet-Box 2 Firmware » Version: 09.01.44

cpe:2.3:o:swisscom:internet-box_2_firmware:09.01.44
Swisscom » Internet-Box 2 Firmware » Version: 09.01.60

cpe:2.3:o:swisscom:internet-box_2_firmware:09.01.60
Swisscom » Internet-Box 2 Firmware » Version: 09.02.08

cpe:2.3:o:swisscom:internet-box_2_firmware:09.02.08
Swisscom » Internet-Box 2 Firmware » Version: 09.04.00

cpe:2.3:o:swisscom:internet-box_2_firmware:09.04.00
Swisscom » Internet-Box 3 Firmware » Version: N/A

cpe:2.3:o:swisscom:internet-box_3_firmware:-
Swisscom » Internet-Box Light Firmware » Version: N/A

cpe:2.3:o:swisscom:internet-box_light_firmware:-
Swisscom » Internet-Box Light Firmware » Version: 08.04.26

cpe:2.3:o:swisscom:internet-box_light_firmware:08.04.26
Swisscom » Internet-Box Light Firmware » Version: 08.04.36

cpe:2.3:o:swisscom:internet-box_light_firmware:08.04.36
Swisscom » Internet-Box Light Firmware » Version: 08.05.02

cpe:2.3:o:swisscom:internet-box_light_firmware:08.05.02
Swisscom » Internet-Box Plus Firmware » Version: N/A

cpe:2.3:o:swisscom:internet-box_plus_firmware:-
Swisscom » Internet-Box Plus Firmware » Version: 09.01.52

cpe:2.3:o:swisscom:internet-box_plus_firmware:09.01.52
Swisscom » Internet-Box Plus Firmware » Version: 09.02.08

cpe:2.3:o:swisscom:internet-box_plus_firmware:09.02.08
Swisscom » Internet-Box Plus Firmware » Version: 09.04.00

cpe:2.3:o:swisscom:internet-box_plus_firmware:09.04.00
Swisscom » Internet-Box Standard Firmware » Version: N/A

cpe:2.3:o:swisscom:internet-box_standard_firmware:-
Swisscom » Internet-Box Standard Firmware » Version: 09.01.28

cpe:2.3:o:swisscom:internet-box_standard_firmware:09.01.28
Swisscom » Internet-Box Standard Firmware » Version: 09.02.08

cpe:2.3:o:swisscom:internet-box_standard_firmware:09.02.08
Swisscom » Internet-Box Standard Firmware » Version: 09.04.00

cpe:2.3:o:swisscom:internet-box_standard_firmware:09.04.00

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-16134

Products

Pricing

Contact Us