Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2020-36529

SevOne Network Management System Traceroute traceroute.php command injection

Description

A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22. This affects the file traceroute.php of the Traceroute Handler. The manipulation leads to privilege escalation with a command injection. It is possible to initiate the attack remotely.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SevOne Network Management System

  • 5.7.2.0affected
  • 5.7.2.1affected
  • 5.7.2.2affected
  • 5.7.2.3affected
  • 5.7.2.4affected
  • 5.7.2.5affected
  • 5.7.2.6affected
  • 5.7.2.7affected
  • 5.7.2.8affected
  • 5.7.2.9affected
  • 5.7.2.10affected
  • 5.7.2.11affected
  • 5.7.2.12affected
  • 5.7.2.13affected
  • 5.7.2.14affected
  • 5.7.2.15affected
  • 5.7.2.16affected
  • 5.7.2.17affected
  • 5.7.2.18affected
  • 5.7.2.19affected
  • 5.7.2.20affected
  • 5.7.2.21affected
  • 5.7.2.22affected

References