OpenCVE

AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to cause a denial of service scenario.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

AV:N/AC:L/Au:N/C:N/I:N/A:P

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Ave	53ab-wbs 53ab-wbs Firmware Dominaplus Ts01 Ts01 Firmware Ts03x-v Ts03x-v Firmware Ts04x-v Ts04x-v Firmware Ts05 Ts05 Firmware Ts05n-v Ts05n-v Firmware

Configuration 1 [-]

cpe:2.3:a:ave:dominaplus:*:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:ave:53ab-wbs_firmware:1.10.62:*:*:*:*:*:*:*

cpe:2.3:h:ave:53ab-wbs:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:ave:ts01_firmware:1.0.65:*:*:*:*:*:*:*

cpe:2.3:h:ave:ts01:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:ave:ts03x-v_firmware:1.10.45a:*:*:*:*:*:*:*

cpe:2.3:h:ave:ts03x-v:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:ave:ts04x-v_firmware:1.10.45a:*:*:*:*:*:*:*

cpe:2.3:h:ave:ts04x-v:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:ave:ts05_firmware:1.10.36:*:*:*:*:*:*:*

cpe:2.3:h:ave:ts05:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:ave:ts05n-v_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:ave:ts05n-v:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://cwe.mitre.org/data/definitions/306.html
https://www.exploit-db.com/exploits/47820
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5548.php

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2021-04-28T14:54:48

Updated: 2024-08-04T14:30:33.600Z

Reserved: 2020-08-13T00:00:00

Link: CVE-2020-21996

Vulnrichment

No data.

NVD

Status : Modified

Published: 2021-04-28T15:15:07.943

Modified: 2024-11-21T05:12:59.497

Link: CVE-2020-21996

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to cause a denial of service scenario."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-07-10T20:18:38", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5548.php"}, {"name": "Exploit Database", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/47820"}, {"tags": ["x_refsource_MISC"], "url": "https://cwe.mitre.org/data/definitions/306.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2020-21996", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to cause a denial of service scenario."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5548.php", "refsource": "MISC", "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5548.php"}, {"name": "Exploit Database", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/47820"}, {"name": "https://cwe.mitre.org/data/definitions/306.html", "refsource": "MISC", "url": "https://cwe.mitre.org/data/definitions/306.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T14:30:33.600Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5548.php"}, {"name": "Exploit Database", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/47820"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://cwe.mitre.org/data/definitions/306.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2020-21996", "datePublished": "2021-04-28T14:54:48", "dateReserved": "2020-08-13T00:00:00", "dateUpdated": "2024-08-04T14:30:33.600Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ave:dominaplus:*:*:*:*:*:*:*:*", "matchCriteriaId": "A1832192-40DB-4D8C-B0A8-DBB251F19100", "versionEndIncluding": "1.10.77", "versionStartIncluding": "1.8.4", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ave:53ab-wbs_firmware:1.10.62:*:*:*:*:*:*:*", "matchCriteriaId": "51CC92CB-942B-4BE1-BEFE-57A71DAF7D50", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ave:53ab-wbs:-:*:*:*:*:*:*:*", "matchCriteriaId": "171FD211-CB91-4123-99F4-12C19D68EEAF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ave:ts01_firmware:1.0.65:*:*:*:*:*:*:*", "matchCriteriaId": "2AE9FCB9-DE6F-44B1-9433-02D7CDF88DA5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ave:ts01:-:*:*:*:*:*:*:*", "matchCriteriaId": "064E7673-1221-4142-A57F-001EDBAAEB6C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ave:ts03x-v_firmware:1.10.45a:*:*:*:*:*:*:*", "matchCriteriaId": "F31ABD8E-0CF3-4CE3-B8EF-8C46A7353457", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ave:ts03x-v:-:*:*:*:*:*:*:*", "matchCriteriaId": "B20A9921-50C8-4954-A8B4-B43D32678695", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ave:ts04x-v_firmware:1.10.45a:*:*:*:*:*:*:*", "matchCriteriaId": "9B777067-9710-4D28-9A5B-F0A4FF7D09AA", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ave:ts04x-v:-:*:*:*:*:*:*:*", "matchCriteriaId": "88A2B318-3DA2-491B-9A6C-BAEC0E10D185", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ave:ts05_firmware:1.10.36:*:*:*:*:*:*:*", "matchCriteriaId": "7636D17E-6E48-409B-82BC-1E9C00B426F0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ave:ts05:-:*:*:*:*:*:*:*", "matchCriteriaId": "42DDCD50-D9C6-4515-8AFD-0FAD983D00C0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ave:ts05n-v_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F8F9D39B-6F67-47EF-BB2C-86FBCD84D76C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ave:ts05n-v:-:*:*:*:*:*:*:*", "matchCriteriaId": "73DFB4EC-EB30-4041-AB29-4000D5E2B29A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to cause a denial of service scenario."}, {"lang": "es", "value": "AVE DOMINAplus versiones anteriores a 1.10.x incluy\u00e9ndola, sufre de una ejecuci\u00f3n de comando de reinicio no autenticado. Los atacantes pueden explotar este problema para causar un escenario de denegaci\u00f3n de servicio"}], "id": "CVE-2020-21996", "lastModified": "2024-11-21T05:12:59.497", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-04-28T15:15:07.943", "references": [{"source": "cve@mitre.org", "tags": ["Technical Description"], "url": "https://cwe.mitre.org/data/definitions/306.html"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "https://www.exploit-db.com/exploits/47820"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5548.php"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Technical Description"], "url": "https://cwe.mitre.org/data/definitions/306.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "https://www.exploit-db.com/exploits/47820"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5548.php"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "nvd@nist.gov", "type": "Primary"}]}