CVEvulnerability
CVE-2020-16279
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-08-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-78
Description
The Kommbox component in Rangee GmbH RangeeOS 8.0.4 is vulnerable to Remote Code Execution due to untrusted user supplied input being passed to the command line without sanitization.
Affected configurations
• rangee rangeeos 8.0.4
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- https://www.contextis.com/en/resources/advisories/cve-2020-16279 Third Party Advisory
- https://www.contextis.com/en/resources/advisories/cve-2020-16279 Third Party Advisory