CVE-2020-13896

medium · 5.3

The web interface of Maipu MP1800X-50 7.5.3.14(R) devices allows remote attackers to obtain sensitive information via the form/formDeviceVerGet URI, such as system id, hardware model, hardware version, bootloader version, software version, software image file, compilation time, and system uptime. This is similar to CVE-2019-1653.

5.3

CVSS

14.8%

EPSS (exploit prob.)

97th

EPSS percentile

2020-06-29

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Vendor	Product	Affected versions
maipu	mp1800x-50_firmware	7.5.3.14(r)
maipu	mp1800x-50	all versions

Check a specific version with /api/v1/cve/match.

References

https://gist.github.com/Saket-taneja/9576573122be1cb0d6dc9d9a73db5631
https://gist.github.com/Saket-taneja/9576573122be1cb0d6dc9d9a73db5631

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-13896