PT-2020-15886 · Kyland · Kyland Kps2204

Published 2020-12-17 · Updated 2020-12-22 · CVE-2020-25010

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers Software Version: R0002.P05

Description The issue allows remote attackers to execute arbitrary code by uploading a malicious script file. This is achieved by constructing a POST type request and including a payload in the request parameters as an instruction to write a file.

Recommendations For Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers Software Version: R0002.P05, consider restricting access to the device to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the vulnerable request parameters in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-25010

Affected Products

Kyland Kps2204

References · 5

• 🔥❌ https://github.com/AnfieldQi/CVE_list/blob/master/CVE-2020-25010.md · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2020-25010 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25010 · Security Note
• https://cnvd.org.cn/flaw/show/CNVD-2020-55990 · Note
• https://t.me/cibsecurity/20983 · Telegram Post