CVE-2020-7222

An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504. The login page responds with JavaScript when one tries to authenticate. An attacker who changes the result parameter (to true) in this JavaScript code can bypass authentication and achieve limited privileges (ability to see every option but not modify them).

CVSS v3 5.3 MEDIUM
CVSS v2.0 5.0 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://sku11army.blogspot.com/2020/01/amcrest-2520ac0018r-login-bypass.html	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:amcrest:web_server:2.520.ac00.18.r:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-01-18 00:15

Updated : 2023-12-10 13:13

NVD link : CVE-2020-7222

Mitre link : CVE-2020-7222

CVE.ORG link : CVE-2020-7222

JSON object : View

Products Affected

amcrest

web_server

CWE

CWE-287

Improper Authentication

{"id": "CVE-2020-7222", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2020-01-18T00:15:12.357", "references": [{"url": "https://sku11army.blogspot.com/2020/01/amcrest-2520ac0018r-login-bypass.html", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504. The login page responds with JavaScript when one tries to authenticate. An attacker who changes the result parameter (to true) in this JavaScript code can bypass authentication and achieve limited privileges (ability to see every option but not modify them)."}, {"lang": "es", "value": "Se detect\u00f3 un problema en Amcrest Web Server versi\u00f3n 2.520.AC00.18.R 2017-06-29 WEB versi\u00f3n 3.2.1.453504. La p\u00e1gina de inicio de sesi\u00f3n responde con JavaScript cuando uno intenta autenticarse. Un atacante que cambia el par\u00e1metro result (a verdadero) en este c\u00f3digo JavaScript puede omitir la autenticaci\u00f3n y alcanzar privilegios limitados (capacidad de visualizar todas las opciones pero sin modificarlas)."}], "lastModified": "2020-01-29T16:23:01.200", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:amcrest:web_server:2.520.ac00.18.r:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8842B9EC-F664-48CC-AA1F-A148E5CCA9C8"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}