CVE-2020-9115

Description

ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0 and 8.0.1 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the plug-in component. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject commands to the target device.

Risk Information

Base Score

7.2

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.822

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-5289 ,CVE-2020-9115 ,CVE-2021-22299 ,CVE-2021-22409 are affected in manageone 6.5.0	NCM
Vulnerabilities CVE-2020-9115 ,CVE-2020-9205 ,CVE-2021-22299 ,CVE-2021-22311 are affected in manageone 8.0.1	NCM
Vulnerabilities CVE-2020-9115 ,CVE-2021-22298 ,CVE-2021-22299 ,CVE-2021-22311 are affected in manageone 8.0.0	NCM
Vulnerabilities CVE-2020-9115 are affected in manageone 6.5.1.1-b050	NCM
Vulnerabilities CVE-2020-9115 ,CVE-2021-22298 ,CVE-2021-22299 are affected in manageone 6.5.1.1-b040	NCM
Vulnerabilities CVE-2020-9115 ,CVE-2021-22298 ,CVE-2021-22299 are affected in manageone 6.5.1.1-b030	NCM
Vulnerabilities CVE-2020-9115 ,CVE-2021-22298 ,CVE-2021-22299 are affected in manageone 6.5.1.1-b020	NCM
Vulnerabilities CVE-2020-9115 ,CVE-2021-22299 ,CVE-2021-22314 are affected in manageone 6.5.1.1-b010	NCM
Improper Input Validation Vulnerability (CVE-2020-9115)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234