What is the CVSS score of CVE-2020-10874?

CVE-2020-10874 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 1.4%.

Is there a public PoC exploit available for CVE-2020-10874?

Yes, a public proof-of-concept exploit is available for CVE-2020-10874. Prioritise patching immediately. EPSS: 1.4%.

Fx9500 41324D41 Us Firmware CVE-2020-10874

HIGH

Missing Authentication for Critical Function (CWE-306)

2020-03-23 cve@mitre.org

Authentication Bypass Fx9500 41324D41 Us Firmware Fx9500 41324D41 Ww Firmware Fx9500 81324D41 Us Firmware Fx9500 81324D41 Ww Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Mar 23, 2020 - 21:15 nvd

HIGH 7.5

DescriptionNVD

Motorola FX9500 devices allow remote attackers to read database files.

AnalysisAI

Motorola FX9500 devices allow remote attackers to read database files. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Missing Authentication for Critical Function (CWE-306), which allows attackers to access critical functionality without authentication. Motorola FX9500 devices allow remote attackers to read database files. Affected products include: Motorola Fx9500-41324D41-Us Firmware, Motorola Fx9500-41324D41-Ww Firmware, Motorola Fx9500-81324D41-Us Firmware, Motorola Fx9500-81324D41-Ww Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Require authentication for all sensitive operations, implement defense in depth.