Alpaquita LinuxStreamSecurity Advisory
Search Cve

CVE-2020-15862

Published: August 20, 2020Last modified: November 1, 2023

Description

Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root.

Severity score breakdown

ParameterValue
Base score7.8
Attack VectorLOCAL
Attack complexityLOW
Privileges requiredLOW
User interactionNONE
ScopeUNCHANGED
ConfidentialityHIGH
Integrity impactHIGH
Availability impactHIGH
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Status

ProductReleasePackageStatus
Alpaquita Linux23 LTSnet-snmpNot affected (5.9.3-r2)
Streamnet-snmpNot affected (5.9.4-r0)

References

ON THIS PAGE