CVE-2020-12487

Command Execution Vulnerability in ABE service PUBLISHED

Description (CNA)

Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege.

Affected (CNA)

Vendor / product	Versions
vivo / ABE	affected Versions earlier than 4.4.0.9

CWE

CWE-20

References

https://www.vivo.com/en/support/security-advisory-detail?id=4

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.