Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-24164

A deserialization flaw is present in Taoensso Nippy before 2.14.2. In some circumstances, it is possible for an attacker to create a malicious payload that, when deserialized, will allow arbitrary code to be executed. This occurs because there is automatic use of the Java Serializable interface.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.0%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
Products affected by CVE-2020-24164
  • Taoensso » Nippy » Version: 0.10.0
    cpe:2.3:a:taoensso:nippy:0.10.0
  • Taoensso » Nippy » Version: 0.10.1
    cpe:2.3:a:taoensso:nippy:0.10.1
  • Taoensso » Nippy » Version: 0.10.2
    cpe:2.3:a:taoensso:nippy:0.10.2
  • Taoensso » Nippy » Version: 0.10.3
    cpe:2.3:a:taoensso:nippy:0.10.3
  • Taoensso » Nippy » Version: 0.10.4
    cpe:2.3:a:taoensso:nippy:0.10.4
  • Taoensso » Nippy » Version: 0.9.0
    cpe:2.3:a:taoensso:nippy:0.9.0
  • Taoensso » Nippy » Version: 0.9.1
    cpe:2.3:a:taoensso:nippy:0.9.1
  • Taoensso » Nippy » Version: 0.9.2
    cpe:2.3:a:taoensso:nippy:0.9.2
  • Taoensso » Nippy » Version: 1.0.0
    cpe:2.3:a:taoensso:nippy:1.0.0
  • Taoensso » Nippy » Version: 1.0.1
    cpe:2.3:a:taoensso:nippy:1.0.1
  • Taoensso » Nippy » Version: 1.1.0
    cpe:2.3:a:taoensso:nippy:1.1.0
  • Taoensso » Nippy » Version: 1.2.0
    cpe:2.3:a:taoensso:nippy:1.2.0
  • Taoensso » Nippy » Version: 1.2.1
    cpe:2.3:a:taoensso:nippy:1.2.1
  • Taoensso » Nippy » Version: 1.3.0
    cpe:2.3:a:taoensso:nippy:1.3.0
  • Taoensso » Nippy » Version: 2.0.0
    cpe:2.3:a:taoensso:nippy:2.0.0
  • Taoensso » Nippy » Version: 2.1.0
    cpe:2.3:a:taoensso:nippy:2.1.0
  • Taoensso » Nippy » Version: 2.10.0
    cpe:2.3:a:taoensso:nippy:2.10.0
  • Taoensso » Nippy » Version: 2.11.0
    cpe:2.3:a:taoensso:nippy:2.11.0
  • Taoensso » Nippy » Version: 2.11.1
    cpe:2.3:a:taoensso:nippy:2.11.1
  • Taoensso » Nippy » Version: 2.12.0
    cpe:2.3:a:taoensso:nippy:2.12.0
  • Taoensso » Nippy » Version: 2.12.1
    cpe:2.3:a:taoensso:nippy:2.12.1
  • Taoensso » Nippy » Version: 2.12.2
    cpe:2.3:a:taoensso:nippy:2.12.2
  • Taoensso » Nippy » Version: 2.13.0
    cpe:2.3:a:taoensso:nippy:2.13.0
  • Taoensso » Nippy » Version: 2.14.0
    cpe:2.3:a:taoensso:nippy:2.14.0
  • Taoensso » Nippy » Version: 2.2.0
    cpe:2.3:a:taoensso:nippy:2.2.0
  • Taoensso » Nippy » Version: 2.3.0
    cpe:2.3:a:taoensso:nippy:2.3.0
  • Taoensso » Nippy » Version: 2.4.0
    cpe:2.3:a:taoensso:nippy:2.4.0
  • Taoensso » Nippy » Version: 2.4.1
    cpe:2.3:a:taoensso:nippy:2.4.1
  • Taoensso » Nippy » Version: 2.5.0
    cpe:2.3:a:taoensso:nippy:2.5.0
  • Taoensso » Nippy » Version: 2.5.1
    cpe:2.3:a:taoensso:nippy:2.5.1
  • Taoensso » Nippy » Version: 2.5.2
    cpe:2.3:a:taoensso:nippy:2.5.2
  • Taoensso » Nippy » Version: 2.6.0
    cpe:2.3:a:taoensso:nippy:2.6.0
  • Taoensso » Nippy » Version: 2.6.1
    cpe:2.3:a:taoensso:nippy:2.6.1
  • Taoensso » Nippy » Version: 2.6.2
    cpe:2.3:a:taoensso:nippy:2.6.2
  • Taoensso » Nippy » Version: 2.6.3
    cpe:2.3:a:taoensso:nippy:2.6.3
  • Taoensso » Nippy » Version: 2.7.0
    cpe:2.3:a:taoensso:nippy:2.7.0
  • Taoensso » Nippy » Version: 2.7.1
    cpe:2.3:a:taoensso:nippy:2.7.1
  • Taoensso » Nippy » Version: 2.8.0
    cpe:2.3:a:taoensso:nippy:2.8.0
  • Taoensso » Nippy » Version: 2.9.0
    cpe:2.3:a:taoensso:nippy:2.9.0
  • Taoensso » Nippy » Version: 2.9.1
    cpe:2.3:a:taoensso:nippy:2.9.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved