high8.8
CVE-2020-22159
EVERTZ devices 3080IPX exe-guest-v1.2-r26125, 7801FC 1.3 Build 27, and 7890IXG V494 are vulnerable to Arbitrary File Upload, allowing an authenticated attacker…
Impact
EVERTZ devices 3080IPX exe-guest-v1.2-r26125, 7801FC 1.3 Build 27, and 7890IXG V494 are vulnerable to Arbitrary File Upload, allowing an authenticated attacker to upload a webshell or overwrite any critical system files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Evertz | 3080ipx Firmware | Version exe-guest-v1.2-r26125 |
| Evertz | 7801fc Firmware | Version 1.3 |
| Evertz | 7890ixg Firmware | Version v494 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cacharros-inthewild.blogspot.com/2023/07/the-3080ipx-is-integrated-multicast.html
- https://sku11army.blogspot.com/2020/02/evertz-path-transversal-arbitrary-file.html
- https://cacharros-inthewild.blogspot.com/2023/07/the-3080ipx-is-integrated-multicast.html
- https://sku11army.blogspot.com/2020/02/evertz-path-transversal-arbitrary-file.html