Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have world-writable permissions for the /root/cleardata.pl (executed as root by crond) and /root/loadperl.sh (executed as root at boot time) scripts.
References
Link | Resource |
---|---|
https://sku11army.blogspot.com/2020/01/iteris-vantage-velocity-field-unit.html | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2020-02-17T03:03:10
Updated: 2020-02-17T03:03:10
Reserved: 2020-02-17T00:00:00
Link: CVE-2020-9024
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-02-17T04:15:11.060
Modified: 2021-07-21T11:39:23.747
Link: CVE-2020-9024
JSON object: View
Redhat Information
No data.
CWE