CVE-2020-11542: Critical severity 3xlogic infinias eidc32 firmware vulnerability
Published Apr 4, 2020
·Updated
3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD= because authentication depends on the client side's interpretation of the <KEY>MYKEY</KEY> substring.
Affected Software
3 affected components
3xLOGIC Infinias Eidc32 Firmware=2.213
3xLOGIC Infinias Eidc32 Web=1.107
3xLOGIC Infinias eIDC32
Event History
Apr 4, 2020
CVE Published
via MITRE·09:26 PM
Data Sourced
via MITRE·09:26 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-11542?
The severity of CVE-2020-11542 is critical with a CVSS score of 9.8.
2
Which devices are affected by CVE-2020-11542?
3xLOGIC Infinias eIDC32 devices with Web 1.107 firmware version 2.213 are affected.
3
How does CVE-2020-11542 allow authentication bypass?
CVE-2020-11542 allows authentication bypass through the CMD.HTM?CMD= vulnerability in the client-side interpretation.
4
Is there a fix available for CVE-2020-11542?
There is no information available about a fix for CVE-2020-11542 at the moment.
5
Where can I find more information about CVE-2020-11542?
More information about CVE-2020-11542 can be found at the following link: [link](https://www.criticalstart.com/authentication-bypass-vulnerability-discovered-in-infinias-eidc32-webserver/).