CVE-2020-5632
First published: Tue Oct 06 2020(Updated: )
InfoCage SiteShell series (Host type SiteShell for IIS V1.4, V1.5, and V1.6, Host type SiteShell for IIS prior to revision V2.0.0.6, V2.1.0.7, V2.1.1.6, V3.0.0.11, V4.0.0.6, V4.1.0.5, and V4.2.0.1, Host type SiteShell for Apache Windows V1.4, V1.5, and V1.6, and Host type SiteShell for Apache Windows prior to revision V2.0.0.6, V2.1.0.7, V2.1.1.6, V3.0.0.11, V4.0.0.6, V4.1.0.5, and V4.2.0.1) allow authenticated attackers to bypass access restriction and to execute arbitrary code with an elevated privilege via a specially crafted executable files.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nec Infocage Siteshell | <2.0.0.6 | |
| Nec Infocage Siteshell | >=2.0.0.0<2.0.0.6 | |
| Nec Infocage Siteshell | >=2.1.0.0<2.1.0.7 | |
| Nec Infocage Siteshell | >=2.1.0.0<2.1.0.7 | |
| Nec Infocage Siteshell | >=2.1.1.0<2.1.1.6 | |
| Nec Infocage Siteshell | >=2.1.1.0<2.1.1.6 | |
| Nec Infocage Siteshell | >=3.0.0.0<3.0.0.11 | |
| Nec Infocage Siteshell | >=3.0.0.0<3.0.0.11 | |
| Nec Infocage Siteshell | >=4.0.0.0<4.0.0.6 | |
| Nec Infocage Siteshell | >=4.0.0.0<4.0.0.6 | |
| Nec Infocage Siteshell | >=4.1.0.0<4.1.0.5 | |
| Nec Infocage Siteshell | >=4.1.0.0<4.1.0.5 | |
| Nec Infocage Siteshell | >=4.2.0.0<4.2.0.1 | |
| Nec Infocage Siteshell | >=4.2.0.0<4.2.0.1 | |
| Nec Infocage Siteshell | =1.4 | |
| Nec Infocage Siteshell | =1.4 | |
| Nec Infocage Siteshell | =1.5 | |
| Nec Infocage Siteshell | =1.5 | |
| Nec Infocage Siteshell | =1.6 | |
| Nec Infocage Siteshell | =1.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-5632?
CVE-2020-5632 is a vulnerability in the InfoCage SiteShell series that affects multiple versions of the Host type SiteShell for IIS and Host type SiteShell for Apache Windows.
What is the severity of CVE-2020-5632?
The severity of CVE-2020-5632 is high with a CVSS score of 7.8.
How does CVE-2020-5632 impact the affected software?
CVE-2020-5632 allows remote attackers to execute arbitrary code or cause a denial of service on systems running the affected versions of InfoCage SiteShell.
How can I fix CVE-2020-5632?
To fix CVE-2020-5632, it is recommended to apply the latest patches and updates provided by NEC, the vendor of InfoCage SiteShell.
Where can I find more information about CVE-2020-5632?
You can find more information about CVE-2020-5632 on the official NEC website and the JVN database.
- collector/nvd-index
- vendor/nec
- canonical/nec infocage siteshell
- version/nec infocage siteshell/2.0.0.0
- version/nec infocage siteshell/2.1.0.0
- version/nec infocage siteshell/2.1.1.0
- version/nec infocage siteshell/3.0.0.0
- version/nec infocage siteshell/4.0.0.0
- version/nec infocage siteshell/4.1.0.0
- version/nec infocage siteshell/4.2.0.0
- version/nec infocage siteshell/1.4
- version/nec infocage siteshell/1.5
- version/nec infocage siteshell/1.6