Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-19360
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Local file inclusion in FHEM 6.0 allows in fhem/FileLog_logWrapper file parameter can allow an attacker to include a file, which can lead to sensitive information disclosure.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
FHEM 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
FHEM是FHEM社区的一个基于Perl用于为房屋自动化的智能设备进行控制的服务端程序。该程序作为服务器运行，您可以通过Web或智能手机前端，telnet或TCP / IP直接对其进行控制，自动执行家庭中的一些常见任务，例如开关灯/百叶窗/取暖等，并记录温度/湿度/功耗等事件。 FHEM 6.0 存在信息泄露漏洞，攻击者可利用该漏洞获取敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
-n/a n/a -
II. Public POCs for CVE-2020-19360
#POC DescriptionSource LinkShenlong Link
1CVE-2020-19360https://github.com/a1665454764/CVE-2020-19360POC Details
2Fhem任意文件读取pochttps://github.com/zzzz966/CVE-2020-19360POC Details
3FHEM version 6.0 suffers from a local file inclusion vulnerability.https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19360.yamlPOC Details
4Nonehttps://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/Fhem%20FileLog_logWrapper%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E%20CVE-2020-19360.mdPOC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2020-19360
Please Login to view more intelligence information
New Vulnerabilities
Product: n/a
Vendor: n/a
V. Comments for CVE-2020-19360

No comments yet

Leave a comment