CVE-2020-7847 : The ipTIME NAS product allows an arbitrary file upload vulnerability in the Mana

The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution. This issue affects: pTIME NAS 1.4.36.

Published 2021-02-23 16:15:13

Updated 2021-02-27 02:39:58

Source KrCERT/CC

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2020-7847

Iptime » Nas-i Firmware
Versions before (<) 1.4.36
cpe:2.3:o:iptime:nas-i_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Iptime » Nas-i » Version: N/A
Iptime » Nas-ii Firmware
Versions before (<) 1.4.36
cpe:2.3:o:iptime:nas-ii_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Iptime » Nas-ii » Version: N/A
Iptime » Nas-iie Firmware
Versions before (<) 1.4.36
cpe:2.3:o:iptime:nas-iie_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Iptime » Nas-iie » Version: N/A
Iptime » Nas101 Firmware
Versions before (<) 1.4.36
cpe:2.3:o:iptime:nas101_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Iptime » Nas101 » Version: N/A
Iptime » Nas1dual Firmware
Versions before (<) 1.4.36
cpe:2.3:o:iptime:nas1dual_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Iptime » Nas1dual » Version: N/A
Iptime » Nas2dual Firmware
Versions before (<) 1.4.36
cpe:2.3:o:iptime:nas2dual_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Iptime » Nas2dual » Version: N/A
Iptime » Nas3 Firmware
Versions before (<) 1.4.36
cpe:2.3:o:iptime:nas3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Iptime » Nas3 » Version: N/A
Iptime » Nas4 Firmware
Versions before (<) 1.4.36
cpe:2.3:o:iptime:nas4_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Iptime » Nas4 » Version: N/A
Iptime » Nas4dual Firmware
Versions before (<) 1.4.36
cpe:2.3:o:iptime:nas4dual_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Iptime » Nas4dual » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-7847

EPSS FAQ

0.99%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 82 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-7847

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.2	MEDIUM	AV:A/AC:L/Au:S/C:P/I:P/A:P	5.1	6.4	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.0	HIGH	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	2.1	5.9	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
7.4	HIGH	CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H	1.5	5.9	KrCERT/CC
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: Low User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2020-7847

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Assigned by:
- nvd@nist.gov (Primary)
- vuln@krcert.or.kr (Secondary)

References for CVE-2020-7847

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35921

KrCERT/CC - KISA 인터넷 보호나라&KrCERT
Third Party Advisory

Jump to

Vulnerability Details : CVE-2020-7847

Products affected by CVE-2020-7847

Exploit prediction scoring system (EPSS) score for CVE-2020-7847

CVSS scores for CVE-2020-7847

CWE ids for CVE-2020-7847

References for CVE-2020-7847