CVE-2020-7533
high-risk
Published 2020-12-01
CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests.
Do I need to act?
-
0.23% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10
Critical
NETWORK
/ LOW complexity
Affected Products (16)
Bmxnoe0100 Firmware
Bmxnoe0110 Firmware
Bmxnoc0401 Firmware
Tsxp574634 Firmware
Tsxp575634 Firmware
Tsxp576634 Firmware
Tsxety4103 Firmware
Tsxety5103 Firmware
140Noe77111 Firmware
140Noc78000 Firmware
140Noc77101 Firmware
140Cpu65260 Firmware
Affected Vendors
51
/ 100
high-risk
Severity
32/34 · Critical
Exploitability
1/34 · Minimal
Exposure
18/34 · Moderate