PT-2020-14434 · Cohesive Networks · Vns3:Vpn

Jake Valletta · Published 2020-08-04 · Updated 2020-08-05 · CVE-2020-15467

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cohesive Networks vns3:vpn appliances versions prior to 4.11.1

Description The administrative interface of the affected appliances is susceptible to authenticated remote code execution, which can result in server compromise.

Recommendations For versions prior to 4.11.1, update to version 4.11.1 or later to resolve the issue.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2020-15467

Affected Products

Vns3:Vpn

References · 4

• https://osv.dev/vulnerability/CVE-2020-15467 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15467 · Security Note
• https://github.com/fireeye/Vulnerability-Disclosures · Note
• https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2020-0007/FEYE-2020-0007.md · Note