FKIE_CVE-2020-11733

Vulnerability from fkie_nvd - Published: 2020-08-13 14:15 - Updated: 2026-06-17 02:50
Severity
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
An issue was discovered on Spirent TestCenter and Avalanche appliance admin interface firmware. An attacker, who already has access to an SSH restricted shell, can achieve root access via shell metacharacters. The attacker can then, for example, read sensitive files such as appliance admin configuration source code. This affects Spirent TestCenter and Avalanche products which chassis version <= 5.08. The SSH restricted shell is available with default credentials.
References
cve@mitre.orghttps://gist.github.com/a05110511t/65d07bc776d7c11b4ccf112a09cca4abThird Party Advisory
cve@mitre.orghttps://github.com/a05110511t/CVE/blob/master/CVE-2020-11733.mdThird Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://gist.github.com/a05110511t/65d07bc776d7c11b4ccf112a09cca4abThird Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://github.com/a05110511t/CVE/blob/master/CVE-2020-11733.mdThird Party Advisory
Impacted products
Vendor Product Version
spirent avalanche *
spirent testcenter *
spirent c100-mp -
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:spirent:avalanche:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BEB912D1-00E8-4A69-B0B8-00282B6B94D3",
              "versionEndIncluding": "5.08",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:spirent:testcenter:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3D7A95C4-D1DC-45F6-84B8-29D3F3CD5493",
              "versionEndIncluding": "5.08",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:spirent:c100-mp:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D0DA071D-653E-4CD9-9708-C041396DD171",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered on Spirent TestCenter and Avalanche appliance admin interface firmware. An attacker, who already has access to an SSH restricted shell, can achieve root access via shell metacharacters. The attacker can then, for example, read sensitive files such as appliance admin configuration source code. This affects Spirent TestCenter and Avalanche products which chassis version \u003c= 5.08. The SSH restricted shell is available with default credentials."
    },
    {
      "lang": "es",
      "value": "Se detect\u00f3 un problema en el firmware de la interfaz de administraci\u00f3n del dispositivo Spirent TestCenter y Avalanche. Un atacante, que ya tiene acceso a un shell restringido SSH, puede alcanzar acceso root mediante metacaracteres de shell. El atacante puede, por ejemplo, leer archivos confidenciales tal y como como el c\u00f3digo fuente de la configuraci\u00f3n del administrador del dispositivo. Esto afecta a los productos Spirent TestCenter y Avalanche cuya versiones de chasis sean anteriores a 5.08 incluy\u00e9ndola. El shell restringido SSH est\u00e1 disponible con credenciales predeterminadas"
    }
  ],
  "id": "CVE-2020-11733",
  "lastModified": "2026-06-17T02:50:42.217",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2020-08-13T14:15:20.377",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://gist.github.com/a05110511t/65d07bc776d7c11b4ccf112a09cca4ab"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://github.com/a05110511t/CVE/blob/master/CVE-2020-11733.md"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://gist.github.com/a05110511t/65d07bc776d7c11b4ccf112a09cca4ab"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://github.com/a05110511t/CVE/blob/master/CVE-2020-11733.md"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.