CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-7847

The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution. This issue affects: pTIME NAS 1.4.36.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 50.6%

CVSS Severity

CVSS v3 Score 7.4

CVSS v2 Score 5.2

References

Products affected by CVE-2020-7847

Iptime » Nas-I » Version: N/A

cpe:2.3:h:iptime:nas-i:-
Iptime » Nas-Ii » Version: N/A

cpe:2.3:h:iptime:nas-ii:-
Iptime » Nas-Iie » Version: N/A

cpe:2.3:h:iptime:nas-iie:-
Iptime » Nas101 » Version: N/A

cpe:2.3:h:iptime:nas101:-
Iptime » Nas1dual » Version: N/A

cpe:2.3:h:iptime:nas1dual:-
Iptime » Nas2dual » Version: N/A

cpe:2.3:h:iptime:nas2dual:-
Iptime » Nas3 » Version: N/A

cpe:2.3:h:iptime:nas3:-
Iptime » Nas4 » Version: N/A

cpe:2.3:h:iptime:nas4:-
Iptime » Nas4dual » Version: N/A

cpe:2.3:h:iptime:nas4dual:-
Iptime » Nas-I Firmware » Version: Any

cpe:2.3:o:iptime:nas-i_firmware:*
Iptime » Nas-Ii Firmware » Version: Any

cpe:2.3:o:iptime:nas-ii_firmware:*
Iptime » Nas-Iie Firmware » Version: Any

cpe:2.3:o:iptime:nas-iie_firmware:*
Iptime » Nas101 Firmware » Version: Any

cpe:2.3:o:iptime:nas101_firmware:*
Iptime » Nas1dual Firmware » Version: N/A

cpe:2.3:o:iptime:nas1dual_firmware:-
Iptime » Nas2dual Firmware » Version: N/A

cpe:2.3:o:iptime:nas2dual_firmware:-
Iptime » Nas3 Firmware » Version: Any

cpe:2.3:o:iptime:nas3_firmware:*
Iptime » Nas4 Firmware » Version: Any

cpe:2.3:o:iptime:nas4_firmware:*
Iptime » Nas4dual Firmware » Version: N/A

cpe:2.3:o:iptime:nas4dual_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-7847

Products

Pricing

Contact Us