CVE-2020-5685
Critical
Description
UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands or cause a denial-of-service (DoS) condition by sending a specially crafted request to a specific URL.
SeverityCritical
CVSS9.8
Exploit probability—
ProductNec Univerge Sv9500 Firmware
PublishedJan 13, 2021
First seenJan 13, 2021
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nec univerge_sv9500_firmware | v1 ≤ v ≤ v7 | — |
| nec univerge_sv8500_firmware | s6 ≤ v ≤ s8 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.