CVE-2020-11698
HIGH 10.0EPSS 73.7%
An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp-x.php would allow a remote attacker to inject commands into the file snmpd.conf that would allow executing commands on the target server.
- CVSS v3.1
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 73.67% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2020-09-17
- Updated
- 2024-08-04
Proof-of-concept exploits (4)
- http://packetstormsecurity.com/files/159470/SpamTitan-7.07-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/160809/SpamTitan-7.07-Command-Injection.html
- https://sensepost.com/blog/2020/clash-of-the-spamtitan/
- sensepost/ClashofSpamTitan9★ · 2020-07-28