CVE-2020-29551

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

An issue was discovered in URVE Build 24.03.2020. Using the _internal/pc/shutdown.php path, it is possible to shutdown the system. Among others, the following files and scripts are also accessible: _internal/pc/abort.php, _internal/pc/restart.php, _internal/pc/vpro.php, _internal/pc/wake.php, _internal/error_u201409.txt, _internal/runcmd.php, _internal/getConfiguration.php, ews/autoload.php, ews/del.php, ews/mod.php, ews/sync.php, utils/backup/backup_server.php, utils/backup/restore_server.php, MyScreens/timeline.config, kreator.html5/test.php, and addedlogs.txt.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-306

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/160725/URVE-Software-Build-24.03.2020-Missing-Authorization.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2020/Dec/48Exploit, Mailing List, Third Party Advisory
https://urve.co.uk/system-rezerwacji-salVendor Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-041.txtExploit, Third Party Advisory
http://packetstormsecurity.com/files/160725/URVE-Software-Build-24.03.2020-Missing-Authorization.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2020/Dec/48Exploit, Mailing List, Third Party Advisory
https://urve.co.uk/system-rezerwacji-salVendor Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-041.txtExploit, Third Party Advisory

Timeline

Published: Dec 23, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-295529.8An issue was discovered in URVE Build 24.03.2020. By using the _internal/pc/vpro.php?mac=0&ip=0&operation=0&usr=0&pass=0%3bpowershell+-c+" s CVE-2020-295538.8The Scheduler in Grav CMS through 1.7.0-rc.17 allows an attacker to execute a system command by tricking an admin into visiting a malicious CVE-2020-295558.1The BackupDelete functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to delete arbitrary files on the underlying CVE-2020-295565.5The Backup functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to read arbitrary local files on the underlying se CVE-2020-295579.8An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attacker CVE-2020-29568.1Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). Supported versions that a CVE-2020-295615.5An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates CVE-2020-295624.8The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, f CVE-2020-295639.8An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118. A NAS Admin authentication bypass vulnerability could allo CVE-2020-295649.8The official Consul Docker images 0.7.1 through 1.4.2 contain a blank password for a root user. System using the Consul Docker container dep CVE-2020-295656.1An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a CVE-2020-295665.5An issue was discovered in Xen through 4.14.x. When they require assistance from the device model, x86 HVM guests must be temporarily de-sch