PT-2020-12037 · Abb · Irc5

Alfonso Glera + 1 · Published 2020-07-15 · Updated 2020-07-23 · CVE-2020-10288

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IRC5 (affected versions not specified)

Description The issue allows unauthorized access to the FTP server on port 21. When attempting to gain access, a request for a username and password is made, but any non-empty input is accepted for these fields.

Recommendations For IRC5, as a temporary workaround, consider restricting access to the FTP server on port 21 until a proper authentication mechanism is implemented. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Improper Access Control

Weakness Enumeration

CWE-287

CWE-284

Related Identifiers

CVE-2020-10288

Affected Products

Irc5

References · 4

• https://osv.dev/vulnerability/CVE-2020-10288 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10288 · Security Note
• https://github.com/aliasrobotics/RVD/issues/3327 · Note
• https://t.me/cvenotify/5092 · Telegram Post