Authenticated Remote Code Execution in Cohesive Networks VPN Appliances
CVE-2020-15467

8.8HIGH

Key Information:

Vendor

Cohesive

Status
Vns3
Vendor
CVE Published:
4 August 2020

What is CVE-2020-15467?

The Cohesive Networks vns3:vpn appliances prior to version 4.11.1 are susceptible to an authenticated remote code execution vulnerability. This flaw could allow attackers with valid credentials to execute arbitrary code on the server, potentially leading to a full system compromise. It is crucial for users to upgrade to the latest version to mitigate the risks associated with this vulnerability.

References

https://github.com/fireeye/Vulnerability-Disclosures
x_refsource_MISC
https://github.com/fireeye/Vulnerability-Disclosures/blob...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.