PT-2020-20285 · Biscom · Biscom Secure File Transfer

Published 2020-02-07 · Updated 2020-03-16 · CVE-2020-8796

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Biscom Secure File Transfer (SFT) versions prior to 5.1.1071 Biscom Secure File Transfer (SFT) versions 6.0.1xxx prior to 6.0.1005

Description The issue allows Remote Code Execution on the server.

Recommendations For versions prior to 5.1.1071, update to version 5.1.1071 or later. For versions 6.0.1xxx prior to 6.0.1005, update to version 6.0.1005 or later.

Fix

Related Identifiers

CVE-2020-8796

Affected Products

Biscom Secure File Transfer

References · 4

• https://cve.biscom.com/bis-sft-cv-0009 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-8796 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8796 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/175922 · Note