CVE-2020-15715: Critical severity rconfig vulnerability
Published Jul 28, 2020
·Updated
rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability using the nodeId parameter.
Affected Software
1 affected component
rConfig rConfig=3.9.5
Event History
Jul 28, 2020
CVE Published
via MITRE·01:04 PM
Data Sourced
via MITRE·01:04 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for rConfig 3.9.5?
The vulnerability ID for rConfig 3.9.5 is CVE-2020-15715.
2
What is the severity of CVE-2020-15715?
The severity of CVE-2020-15715 is critical, with a CVSS score of 9.9.
3
How does CVE-2020-15715 allow an attacker to execute arbitrary code?
CVE-2020-15715 allows a remote authenticated attacker to execute arbitrary code on the system by exploiting an error in the search.crud.php script and using the nodeId parameter.
4
Which version of rConfig is affected by CVE-2020-15715?
CVE-2020-15715 affects rConfig version 3.9.5.
5
How can I fix CVE-2020-15715?
To fix CVE-2020-15715, it is recommended to update rConfig to a version that has addressed the vulnerability.