CVE-2020-8006
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Circontrol Raption Server是Circontrol公司的一款充电站管理软件。它是专为电动汽车充电基础设施而设计的，旨在帮助充电站管理人员监控、控制和管理充电设备，并提供用户和设备的数据分析和报告。 Circontrol Raption Server存在缓冲区错误漏洞，该漏洞源于存在缓冲区溢出问题。
Possible ATT&CK Techniques 3 AI
T1059 · Command and Scripting Interpreter T1068 · Exploitation for Privilege Escalation T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-8006
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time control of the device as root. The ocpp1.5 and pwrstudio binaries on the charging station do not use a number of common exploitation mitigations. In particular, there are no stack canaries and they do not use the Position Independent Executable (PIE) format.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Circontrol Raption Server 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Circontrol Raption Server是Circontrol公司的一款充电站管理软件。它是专为电动汽车充电基础设施而设计的，旨在帮助充电站管理人员监控、控制和管理充电设备，并提供用户和设备的数据分析和报告。 Circontrol Raption Server存在缓冲区错误漏洞，该漏洞源于存在缓冲区溢出问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2020-8006
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-8006
请登录查看更多情报信息。
Mailing List Discussions for CVE-2020-8006 (1)
Same Patch Batch · n/a · 2024-04-12 · 20 CVEs total
| CVE-2024-3685 | 6.3 MEDIUM | DedeCMS stepselect_main.php sql injection |
| CVE-2024-3686 | 4.3 MEDIUM | DedeCMS update_guide.php path traversal |
| CVE-2024-22526 | Bandisoft bandiview 安全漏洞 | |
| CVE-2024-29461 | Floodlight 安全漏洞 | |
| CVE-2024-31839 | CHAOS 安全漏洞 | |
| CVE-2024-31818 | DerbyNet 安全漏洞 | |
| CVE-2024-30845 | Rainbow external link network disk 安全漏洞 | |
| CVE-2024-25545 | Weave Desktop 安全漏洞 | |
| CVE-2024-28718 | OpenStack 安全漏洞 | |
| CVE-2024-29400 | RuoYi 安全漏洞 | |
| CVE-2023-44852 | Cobham SATCOM SAILOR VSAT 跨站脚本漏洞 | |
| CVE-2023-49528 | FFmpeg 安全漏洞 | |
| CVE-2024-30614 | Ametys CMS 安全漏洞 | |
| CVE-2024-22734 | AMCS Group Trux Waste Management Software 安全漏洞 | |
| CVE-2023-44857 | Cobham SATCOM SAILOR VSAT 跨站脚本漏洞 | |
| CVE-2023-44856 | Cobham SATCOM SAILOR VSAT 跨站脚本漏洞 | |
| CVE-2023-44855 | Cobham SATCOM SAILOR VSAT 跨站脚本漏洞 | |
| CVE-2023-44853 | Cobham SATCOM SAILOR VSAT 跨站脚本漏洞 | |
| CVE-2023-44854 | Cobham SATCOM SAILOR VSAT 跨站脚本漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2020-8006
No comments yet