Description
Iteris Vantage Velocity Field Unit 2.3.1, 2.4.2, and 3.0 devices allow the injection of OS commands into cgi-bin/timeconfig.py via shell metacharacters in the NTP Server field.
Unscored
CVE-2020-9020
EUVD-2020-29850GHSA-3cc2-9qw3-rg33
Iteris Vantage Velocity Field Unit 2.3.1, 2.4.2, and 3.0 devices allow the injection of OS commands into cgi-bin/timeconfig.py via shell me…
Published Feb 17, 2020 · Updated Aug 4, 2024 · Assigned by mitre