CVE-2020-1811

Description

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.272

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-1790 ,CVE-2020-1811 ,CVE-2020-1853 are affected in gaussdb_200 6.5.1	NCM
Improper Input Validation Vulnerability (CVE-2020-1811)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234