CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-7377

The Metasploit Framework module "auxiliary/admin/http/telpho10_credential_dump" module is affected by a relative path traversal vulnerability in the untar method which can be exploited to write arbitrary files to arbitrary locations on the host file system when the module is run on a malicious HTTP server.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 60.4%

CVSS Severity

CVSS v3 Score 8.1

CVSS v2 Score 5.0

References

Products affected by CVE-2020-7377

Rapid7 » Metasploit » Version: 4.12.40

cpe:2.3:a:rapid7:metasploit:4.12.40
Rapid7 » Metasploit » Version: 4.13.0

cpe:2.3:a:rapid7:metasploit:4.13.0
Rapid7 » Metasploit » Version: 4.13.1

cpe:2.3:a:rapid7:metasploit:4.13.1
Rapid7 » Metasploit » Version: 4.13.19

cpe:2.3:a:rapid7:metasploit:4.13.19
Rapid7 » Metasploit » Version: 4.14.0

cpe:2.3:a:rapid7:metasploit:4.14.0
Rapid7 » Metasploit » Version: 4.14.1

cpe:2.3:a:rapid7:metasploit:4.14.1
Rapid7 » Metasploit » Version: 4.14.2

cpe:2.3:a:rapid7:metasploit:4.14.2
Rapid7 » Metasploit » Version: 4.14.3

cpe:2.3:a:rapid7:metasploit:4.14.3
Rapid7 » Metasploit » Version: 4.15.0

cpe:2.3:a:rapid7:metasploit:4.15.0
Rapid7 » Metasploit » Version: 4.15.1

cpe:2.3:a:rapid7:metasploit:4.15.1
Rapid7 » Metasploit » Version: 4.16.0

cpe:2.3:a:rapid7:metasploit:4.16.0
Rapid7 » Metasploit » Version: 4.17.1

cpe:2.3:a:rapid7:metasploit:4.17.1
Rapid7 » Metasploit » Version: 4.19.0

cpe:2.3:a:rapid7:metasploit:4.19.0
Rapid7 » Metasploit » Version: 5.0.0

cpe:2.3:a:rapid7:metasploit:5.0.0
Rapid7 » Metasploit » Version: 5.0.1

cpe:2.3:a:rapid7:metasploit:5.0.1
Rapid7 » Metasploit » Version: 5.0.10

cpe:2.3:a:rapid7:metasploit:5.0.10
Rapid7 » Metasploit » Version: 5.0.100

cpe:2.3:a:rapid7:metasploit:5.0.100
Rapid7 » Metasploit » Version: 5.0.101

cpe:2.3:a:rapid7:metasploit:5.0.101
Rapid7 » Metasploit » Version: 5.0.11

cpe:2.3:a:rapid7:metasploit:5.0.11
Rapid7 » Metasploit » Version: 5.0.12

cpe:2.3:a:rapid7:metasploit:5.0.12
Rapid7 » Metasploit » Version: 5.0.13

cpe:2.3:a:rapid7:metasploit:5.0.13
Rapid7 » Metasploit » Version: 5.0.14

cpe:2.3:a:rapid7:metasploit:5.0.14
Rapid7 » Metasploit » Version: 5.0.15

cpe:2.3:a:rapid7:metasploit:5.0.15
Rapid7 » Metasploit » Version: 5.0.16

cpe:2.3:a:rapid7:metasploit:5.0.16
Rapid7 » Metasploit » Version: 5.0.17

cpe:2.3:a:rapid7:metasploit:5.0.17
Rapid7 » Metasploit » Version: 5.0.18

cpe:2.3:a:rapid7:metasploit:5.0.18
Rapid7 » Metasploit » Version: 5.0.19

cpe:2.3:a:rapid7:metasploit:5.0.19
Rapid7 » Metasploit » Version: 5.0.2

cpe:2.3:a:rapid7:metasploit:5.0.2
Rapid7 » Metasploit » Version: 5.0.20

cpe:2.3:a:rapid7:metasploit:5.0.20
Rapid7 » Metasploit » Version: 5.0.21

cpe:2.3:a:rapid7:metasploit:5.0.21
Rapid7 » Metasploit » Version: 5.0.22

cpe:2.3:a:rapid7:metasploit:5.0.22
Rapid7 » Metasploit » Version: 5.0.23

cpe:2.3:a:rapid7:metasploit:5.0.23
Rapid7 » Metasploit » Version: 5.0.24

cpe:2.3:a:rapid7:metasploit:5.0.24
Rapid7 » Metasploit » Version: 5.0.25

cpe:2.3:a:rapid7:metasploit:5.0.25
Rapid7 » Metasploit » Version: 5.0.26

cpe:2.3:a:rapid7:metasploit:5.0.26
Rapid7 » Metasploit » Version: 5.0.27

cpe:2.3:a:rapid7:metasploit:5.0.27
Rapid7 » Metasploit » Version: 5.0.28

cpe:2.3:a:rapid7:metasploit:5.0.28
Rapid7 » Metasploit » Version: 5.0.29

cpe:2.3:a:rapid7:metasploit:5.0.29
Rapid7 » Metasploit » Version: 5.0.3

cpe:2.3:a:rapid7:metasploit:5.0.3
Rapid7 » Metasploit » Version: 5.0.30

cpe:2.3:a:rapid7:metasploit:5.0.30
Rapid7 » Metasploit » Version: 5.0.31

cpe:2.3:a:rapid7:metasploit:5.0.31
Rapid7 » Metasploit » Version: 5.0.32

cpe:2.3:a:rapid7:metasploit:5.0.32
Rapid7 » Metasploit » Version: 5.0.34

cpe:2.3:a:rapid7:metasploit:5.0.34
Rapid7 » Metasploit » Version: 5.0.35

cpe:2.3:a:rapid7:metasploit:5.0.35
Rapid7 » Metasploit » Version: 5.0.36

cpe:2.3:a:rapid7:metasploit:5.0.36
Rapid7 » Metasploit » Version: 5.0.37

cpe:2.3:a:rapid7:metasploit:5.0.37
Rapid7 » Metasploit » Version: 5.0.38

cpe:2.3:a:rapid7:metasploit:5.0.38
Rapid7 » Metasploit » Version: 5.0.39

cpe:2.3:a:rapid7:metasploit:5.0.39
Rapid7 » Metasploit » Version: 5.0.4

cpe:2.3:a:rapid7:metasploit:5.0.4
Rapid7 » Metasploit » Version: 5.0.40

cpe:2.3:a:rapid7:metasploit:5.0.40
Rapid7 » Metasploit » Version: 5.0.41

cpe:2.3:a:rapid7:metasploit:5.0.41
Rapid7 » Metasploit » Version: 5.0.42

cpe:2.3:a:rapid7:metasploit:5.0.42
Rapid7 » Metasploit » Version: 5.0.43

cpe:2.3:a:rapid7:metasploit:5.0.43
Rapid7 » Metasploit » Version: 5.0.44

cpe:2.3:a:rapid7:metasploit:5.0.44
Rapid7 » Metasploit » Version: 5.0.45

cpe:2.3:a:rapid7:metasploit:5.0.45
Rapid7 » Metasploit » Version: 5.0.46

cpe:2.3:a:rapid7:metasploit:5.0.46
Rapid7 » Metasploit » Version: 5.0.47

cpe:2.3:a:rapid7:metasploit:5.0.47
Rapid7 » Metasploit » Version: 5.0.48

cpe:2.3:a:rapid7:metasploit:5.0.48
Rapid7 » Metasploit » Version: 5.0.49

cpe:2.3:a:rapid7:metasploit:5.0.49
Rapid7 » Metasploit » Version: 5.0.5

cpe:2.3:a:rapid7:metasploit:5.0.5
Rapid7 » Metasploit » Version: 5.0.50

cpe:2.3:a:rapid7:metasploit:5.0.50
Rapid7 » Metasploit » Version: 5.0.52

cpe:2.3:a:rapid7:metasploit:5.0.52
Rapid7 » Metasploit » Version: 5.0.53

cpe:2.3:a:rapid7:metasploit:5.0.53
Rapid7 » Metasploit » Version: 5.0.54

cpe:2.3:a:rapid7:metasploit:5.0.54
Rapid7 » Metasploit » Version: 5.0.55

cpe:2.3:a:rapid7:metasploit:5.0.55
Rapid7 » Metasploit » Version: 5.0.56

cpe:2.3:a:rapid7:metasploit:5.0.56
Rapid7 » Metasploit » Version: 5.0.57

cpe:2.3:a:rapid7:metasploit:5.0.57
Rapid7 » Metasploit » Version: 5.0.58

cpe:2.3:a:rapid7:metasploit:5.0.58
Rapid7 » Metasploit » Version: 5.0.59

cpe:2.3:a:rapid7:metasploit:5.0.59
Rapid7 » Metasploit » Version: 5.0.6

cpe:2.3:a:rapid7:metasploit:5.0.6
Rapid7 » Metasploit » Version: 5.0.60

cpe:2.3:a:rapid7:metasploit:5.0.60
Rapid7 » Metasploit » Version: 5.0.61

cpe:2.3:a:rapid7:metasploit:5.0.61
Rapid7 » Metasploit » Version: 5.0.62

cpe:2.3:a:rapid7:metasploit:5.0.62
Rapid7 » Metasploit » Version: 5.0.63

cpe:2.3:a:rapid7:metasploit:5.0.63
Rapid7 » Metasploit » Version: 5.0.64

cpe:2.3:a:rapid7:metasploit:5.0.64
Rapid7 » Metasploit » Version: 5.0.65

cpe:2.3:a:rapid7:metasploit:5.0.65
Rapid7 » Metasploit » Version: 5.0.66

cpe:2.3:a:rapid7:metasploit:5.0.66
Rapid7 » Metasploit » Version: 5.0.67

cpe:2.3:a:rapid7:metasploit:5.0.67
Rapid7 » Metasploit » Version: 5.0.68

cpe:2.3:a:rapid7:metasploit:5.0.68
Rapid7 » Metasploit » Version: 5.0.69

cpe:2.3:a:rapid7:metasploit:5.0.69
Rapid7 » Metasploit » Version: 5.0.7

cpe:2.3:a:rapid7:metasploit:5.0.7
Rapid7 » Metasploit » Version: 5.0.70

cpe:2.3:a:rapid7:metasploit:5.0.70
Rapid7 » Metasploit » Version: 5.0.71

cpe:2.3:a:rapid7:metasploit:5.0.71
Rapid7 » Metasploit » Version: 5.0.72

cpe:2.3:a:rapid7:metasploit:5.0.72
Rapid7 » Metasploit » Version: 5.0.73

cpe:2.3:a:rapid7:metasploit:5.0.73
Rapid7 » Metasploit » Version: 5.0.74

cpe:2.3:a:rapid7:metasploit:5.0.74
Rapid7 » Metasploit » Version: 5.0.75

cpe:2.3:a:rapid7:metasploit:5.0.75
Rapid7 » Metasploit » Version: 5.0.76

cpe:2.3:a:rapid7:metasploit:5.0.76
Rapid7 » Metasploit » Version: 5.0.77

cpe:2.3:a:rapid7:metasploit:5.0.77
Rapid7 » Metasploit » Version: 5.0.78

cpe:2.3:a:rapid7:metasploit:5.0.78
Rapid7 » Metasploit » Version: 5.0.79

cpe:2.3:a:rapid7:metasploit:5.0.79
Rapid7 » Metasploit » Version: 5.0.8

cpe:2.3:a:rapid7:metasploit:5.0.8
Rapid7 » Metasploit » Version: 5.0.80

cpe:2.3:a:rapid7:metasploit:5.0.80
Rapid7 » Metasploit » Version: 5.0.81

cpe:2.3:a:rapid7:metasploit:5.0.81
Rapid7 » Metasploit » Version: 5.0.82

cpe:2.3:a:rapid7:metasploit:5.0.82
Rapid7 » Metasploit » Version: 5.0.83

cpe:2.3:a:rapid7:metasploit:5.0.83
Rapid7 » Metasploit » Version: 5.0.84

cpe:2.3:a:rapid7:metasploit:5.0.84
Rapid7 » Metasploit » Version: 5.0.85

cpe:2.3:a:rapid7:metasploit:5.0.85
Rapid7 » Metasploit » Version: 5.0.86

cpe:2.3:a:rapid7:metasploit:5.0.86
Rapid7 » Metasploit » Version: 5.0.87

cpe:2.3:a:rapid7:metasploit:5.0.87
Rapid7 » Metasploit » Version: 5.0.88

cpe:2.3:a:rapid7:metasploit:5.0.88
Rapid7 » Metasploit » Version: 5.0.89

cpe:2.3:a:rapid7:metasploit:5.0.89
Rapid7 » Metasploit » Version: 5.0.9

cpe:2.3:a:rapid7:metasploit:5.0.9
Rapid7 » Metasploit » Version: 5.0.90

cpe:2.3:a:rapid7:metasploit:5.0.90
Rapid7 » Metasploit » Version: 5.0.91

cpe:2.3:a:rapid7:metasploit:5.0.91
Rapid7 » Metasploit » Version: 5.0.92

cpe:2.3:a:rapid7:metasploit:5.0.92
Rapid7 » Metasploit » Version: 5.0.93

cpe:2.3:a:rapid7:metasploit:5.0.93
Rapid7 » Metasploit » Version: 5.0.94

cpe:2.3:a:rapid7:metasploit:5.0.94
Rapid7 » Metasploit » Version: 5.0.95

cpe:2.3:a:rapid7:metasploit:5.0.95
Rapid7 » Metasploit » Version: 5.0.96

cpe:2.3:a:rapid7:metasploit:5.0.96
Rapid7 » Metasploit » Version: 5.0.97

cpe:2.3:a:rapid7:metasploit:5.0.97
Rapid7 » Metasploit » Version: 5.0.98

cpe:2.3:a:rapid7:metasploit:5.0.98
Rapid7 » Metasploit » Version: 5.0.99

cpe:2.3:a:rapid7:metasploit:5.0.99
Rapid7 » Metasploit » Version: 6.0.0

cpe:2.3:a:rapid7:metasploit:6.0.0
Rapid7 » Metasploit » Version: 6.0.1

cpe:2.3:a:rapid7:metasploit:6.0.1
Rapid7 » Metasploit » Version: 6.0.2

cpe:2.3:a:rapid7:metasploit:6.0.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-7377

Products

Pricing

Contact Us