CVE-2020-5535

OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors.

Score

CVSS 3.1 8.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2020-03-04

Last modified

2024-08-04

Weaknesses

CWE-78

Affected products

• Openblocks Iot Vx2 Firmware (Plathome)
• Openblocks Iot Vx2 (Plathome Co.ltd.)

References

• https://jvn.jp/en/jp/JVN19666251/index.html
• https://www.plathome.co.jp/software/vx2-v4-0-0/