PT-2022-7956 · Jung · Jung Smart Visu Server

T. Weber · Published 2022-06-22 · Updated 2022-06-29 · CVE-2017-20083

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JUNG Smart Visu Server versions 1.0.804 through 1.0.832

Description A critical issue was found in the SSH Server component, allowing for a backdoor due to an unknown function. The manipulation can be exploited locally. The issue has been publicly disclosed and may be used for attacks.

Recommendations For JUNG Smart Visu Server versions 1.0.804 through 1.0.832, upgrade to version 1.0.900 to address this issue.

Exploit

Fix

Hidden Functionality

Weakness Enumeration

CWE-912

Related Identifiers

CVE-2017-20083

Affected Products

Jung Smart Visu Server

References · 6

• 🔥 http://seclists.org/fulldisclosure/2017/Feb/18 · Exploit
• https://osv.dev/vulnerability/CVE-2017-20083 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-20083 · Security Note
• https://t.me/cvenotify/31984 · Telegram Post
• https://t.me/cvenotify/32359 · Telegram Post
• https://vuldb.com/?id.96816 · Note