PT-2020-6030 · Unknown · Embedded Web Server

Published

2020-10-09

·

Updated

2020-10-09

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Embedded web server (affected versions not specified)
Description The issue is related to insufficient input validation in the MtcSetDataItem function of the embedded web server. This can be exploited by a remote attacker to elevate privileges and cause a denial of service using a specially crafted packet.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2021-02705

Affected Products

Embedded Web Server