CVE-2020-28250

Published November 6th, 2020

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

10

HIGH

Affected

1

PROJECT

Description

Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client side.

GitHub