Search

Find a vulnerability

Search criteria

    3 vulnerabilities by qsc

    VAR-202010-0448

    Vulnerability from variot - Updated: 2024-11-23 22:05

    An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version. QSC Q-SYS is a device used in signal processing from QSC Corporation of the United States. The device is used in audio information processing and information exchange, and can be used in conferences, teachers, lecture halls and other multi-person conference scenarios. Attackers can use this vulnerability to traverse TFTP related directories

    Show details on source website
    To clipboard 

    {
  "affected_products": {
    "_id": null,
    "data": [
      {
        "_id": null,
        "model": "q-sys core manager",
        "scope": "eq",
        "trust": 2.4,
        "vendor": "qsc",
        "version": "8.2.1"
      },
      {
        "_id": null,
        "model": "q-sys core manager",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "qsc",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-59737"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-013273"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-24990"
      }
    ]
  },
  "credits": {
    "_id": null,
    "data": "Kevin Randall",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "159699"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202010-1421"
      }
    ],
    "trust": 0.7
  },
  "cve": "CVE-2020-24990",
  "cvss": {
    "_id": null,
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CVE-2020-24990",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 1.8,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "NONE",
            "baseScore": 6.4,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2020-59737",
            "impactScore": 4.9,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 3.9,
            "id": "CVE-2020-24990",
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "None",
            "baseScore": 7.5,
            "baseSeverity": "High",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2020-24990",
            "impactScore": null,
            "integrityImpact": "None",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2020-24990",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2020-24990",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2020-59737",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202010-1421",
            "trust": 0.6,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-59737"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-013273"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202010-1421"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-24990"
      }
    ]
  },
  "description": {
    "_id": null,
    "data": "An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version. QSC Q-SYS is a device used in signal processing from QSC Corporation of the United States. The device is used in audio information processing and information exchange, and can be used in conferences, teachers, lecture halls and other multi-person conference scenarios. Attackers can use this vulnerability to traverse TFTP related directories",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2020-24990"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-013273"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2020-59737"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-24990"
      },
      {
        "db": "PACKETSTORM",
        "id": "159699"
      }
    ],
    "trust": 2.34
  },
  "external_ids": {
    "_id": null,
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2020-24990",
        "trust": 3.2
      },
      {
        "db": "PACKETSTORM",
        "id": "159699",
        "trust": 2.4
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-013273",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2020-59737",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202010-1421",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-24990",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-59737"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-24990"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-013273"
      },
      {
        "db": "PACKETSTORM",
        "id": "159699"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202010-1421"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-24990"
      }
    ]
  },
  "id": "VAR-202010-0448",
  "iot": {
    "_id": null,
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-59737"
      }
    ],
    "trust": 1.2666667
  },
  "iot_taxonomy": {
    "_id": null,
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-59737"
      }
    ]
  },
  "last_update_date": "2024-11-23T22:05:25.693000Z",
  "patch": {
    "_id": null,
    "data": [
      {
        "title": "Q-SYS\u00a0Core\u00a0Manager",
        "trust": 0.8,
        "url": "https://q-syshelp.qsc.com/Content/Core_Manager/CoreManager_Overview.htm"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-013273"
      }
    ]
  },
  "problemtype_data": {
    "_id": null,
    "data": [
      {
        "problemtype": "CWE-22",
        "trust": 1.0
      },
      {
        "problemtype": "Path traversal (CWE-22) [NVD Evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-013273"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-24990"
      }
    ]
  },
  "references": {
    "_id": null,
    "data": [
      {
        "trust": 2.9,
        "url": "http://packetstormsecurity.com/files/159699/qsc-q-sys-core-manager-8.2.1-directory-traversal.html"
      },
      {
        "trust": 2.5,
        "url": "http://seclists.org/fulldisclosure/2020/oct/30"
      },
      {
        "trust": 1.8,
        "url": "https://q-syshelp.qsc.com/content/core_manager/coremanager_overview.htm"
      },
      {
        "trust": 1.5,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-24990"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-59737"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-24990"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-013273"
      },
      {
        "db": "PACKETSTORM",
        "id": "159699"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202010-1421"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-24990"
      }
    ]
  },
  "sources": {
    "_id": null,
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-59737",
        "ident": null
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-24990",
        "ident": null
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-013273",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "159699",
        "ident": null
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202010-1421",
        "ident": null
      },
      {
        "db": "NVD",
        "id": "CVE-2020-24990",
        "ident": null
      }
    ]
  },
  "sources_release_date": {
    "_id": null,
    "data": [
      {
        "date": "2020-10-31T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2020-59737",
        "ident": null
      },
      {
        "date": "2020-10-28T00:00:00",
        "db": "VULMON",
        "id": "CVE-2020-24990",
        "ident": null
      },
      {
        "date": "2021-06-23T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2020-013273",
        "ident": null
      },
      {
        "date": "2020-10-26T16:29:26",
        "db": "PACKETSTORM",
        "id": "159699",
        "ident": null
      },
      {
        "date": "2020-10-26T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202010-1421",
        "ident": null
      },
      {
        "date": "2020-10-28T19:15:13.620000",
        "db": "NVD",
        "id": "CVE-2020-24990",
        "ident": null
      }
    ]
  },
  "sources_update_date": {
    "_id": null,
    "data": [
      {
        "date": "2020-10-31T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2020-59737",
        "ident": null
      },
      {
        "date": "2020-11-17T00:00:00",
        "db": "VULMON",
        "id": "CVE-2020-24990",
        "ident": null
      },
      {
        "date": "2021-06-23T03:28:00",
        "db": "JVNDB",
        "id": "JVNDB-2020-013273",
        "ident": null
      },
      {
        "date": "2020-11-24T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202010-1421",
        "ident": null
      },
      {
        "date": "2024-11-21T05:16:23.833000",
        "db": "NVD",
        "id": "CVE-2020-24990",
        "ident": null
      }
    ]
  },
  "threat_type": {
    "_id": null,
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202010-1421"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "_id": null,
    "data": "QSC\u00a0Q-SYS\u00a0Core\u00a0Manager\u00a0 Traversal Vulnerability in Japan",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-013273"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "_id": null,
    "data": "path traversal",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202010-1421"
      }
    ],
    "trust": 0.6
  }
}

    CVE-2020-24990 (GCVE-0-2020-24990)

    Vulnerability from nvd – Published: 2020-10-28 18:49 – Updated: 2024-08-04 15:26
    VLAI
    Summary
    An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2164 records in the last 180 days details
    References
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T15:26:09.144Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://q-syshelp.qsc.com/Content/Core_Manager/CoreManager_Overview.htm"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2020/Oct/30"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/159699/QSC-Q-SYS-Core-Manager-8.2.1-Directory-Traversal.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-28T18:49:24.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://q-syshelp.qsc.com/Content/Core_Manager/CoreManager_Overview.htm"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2020/Oct/30"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/159699/QSC-Q-SYS-Core-Manager-8.2.1-Directory-Traversal.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-24990",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://q-syshelp.qsc.com/Content/Core_Manager/CoreManager_Overview.htm",
              "refsource": "MISC",
              "url": "https://q-syshelp.qsc.com/Content/Core_Manager/CoreManager_Overview.htm"
            },
            {
              "name": "http://seclists.org/fulldisclosure/2020/Oct/30",
              "refsource": "MISC",
              "url": "http://seclists.org/fulldisclosure/2020/Oct/30"
            },
            {
              "name": "http://packetstormsecurity.com/files/159699/QSC-Q-SYS-Core-Manager-8.2.1-Directory-Traversal.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/159699/QSC-Q-SYS-Core-Manager-8.2.1-Directory-Traversal.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-24990",
    "datePublished": "2020-10-28T18:49:24.000Z",
    "dateReserved": "2020-08-28T00:00:00.000Z",
    "dateUpdated": "2024-08-04T15:26:09.144Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2020-24990 (GCVE-0-2020-24990)

    Vulnerability from cvelistv5 – Published: 2020-10-28 18:49 – Updated: 2024-08-04 15:26
    VLAI
    Summary
    An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2164 records in the last 180 days details
    References
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T15:26:09.144Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://q-syshelp.qsc.com/Content/Core_Manager/CoreManager_Overview.htm"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2020/Oct/30"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/159699/QSC-Q-SYS-Core-Manager-8.2.1-Directory-Traversal.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-28T18:49:24.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://q-syshelp.qsc.com/Content/Core_Manager/CoreManager_Overview.htm"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2020/Oct/30"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/159699/QSC-Q-SYS-Core-Manager-8.2.1-Directory-Traversal.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-24990",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://q-syshelp.qsc.com/Content/Core_Manager/CoreManager_Overview.htm",
              "refsource": "MISC",
              "url": "https://q-syshelp.qsc.com/Content/Core_Manager/CoreManager_Overview.htm"
            },
            {
              "name": "http://seclists.org/fulldisclosure/2020/Oct/30",
              "refsource": "MISC",
              "url": "http://seclists.org/fulldisclosure/2020/Oct/30"
            },
            {
              "name": "http://packetstormsecurity.com/files/159699/QSC-Q-SYS-Core-Manager-8.2.1-Directory-Traversal.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/159699/QSC-Q-SYS-Core-Manager-8.2.1-Directory-Traversal.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-24990",
    "datePublished": "2020-10-28T18:49:24.000Z",
    "dateReserved": "2020-08-28T00:00:00.000Z",
    "dateUpdated": "2024-08-04T15:26:09.144Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}