Details of VAR-202001-1742

ID

VAR-202001-1742

CVE

CVE-2020-6960

TITLE

plural MAXPRO VMS and NVR In SQL Injection vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2020-001718

DESCRIPTION

The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAXPRO NVR XE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR SE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR PE prior to Version NVR 5.6 Build 595 T2-Patch, and MPNVRSWXX prior to Version NVR 5.6 Build 595 T2-Patch contain an SQL injection vulnerability that could give an attacker remote unauthenticated access to the web user interface with administrator-level privileges. plural MAXPRO VMS and NVR To SQL An injection vulnerability exists.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. Honeywell Maxpro VMS & NVR is a Honeywell security solution. Multiple Honeywell products have SQL injection vulnerabilities that could be exploited by an attacker to gain unauthorized access to the Web user interface

Trust: 2.34

sources: NVD: CVE-2020-6960 // JVNDB: JVNDB-2020-001718 // CNVD: CNVD-2020-03941 // IVD: 3ebfb0cf-1619-4d4f-b10e-edd86c0b655d

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: 3ebfb0cf-1619-4d4f-b10e-edd86c0b655d // CNVD: CNVD-2020-03941

AFFECTED PRODUCTS

vendor:	honeywell	model:	maxpro nvr se	scope:	lte	version:	5.6	Trust: 1.0
vendor:	honeywell	model:	maxpro nvr xe	scope:	lte	version:	5.6	Trust: 1.0
vendor:	honeywell	model:	hnmswvmslt	scope:	lte	version:	vms560	Trust: 1.0
vendor:	honeywell	model:	hnmswvms	scope:	lte	version:	vms560	Trust: 1.0
vendor:	honeywell	model:	maxpro nvr pe	scope:	lte	version:	5.6	Trust: 1.0
vendor:	honeywell	model:	mpnvrswxx	scope:	lte	version:	5.6	Trust: 1.0
vendor:	honeywell	model:	hnmswvms	scope:	eq	version:	vms 560 build 595 t2-patch	Trust: 0.8
vendor:	honeywell	model:	hnmswvmslt	scope:	eq	version:	vms 560 build 595 t2-patch	Trust: 0.8
vendor:	honeywell	model:	maxpro nvr pe	scope:	eq	version:	nvr 5.6 build 595 t2-patch	Trust: 0.8
vendor:	honeywell	model:	maxpro nvr se	scope:	eq	version:	nvr 5.6 build 595 t2-patch	Trust: 0.8
vendor:	honeywell	model:	maxpro nvr xe	scope:	eq	version:	nvr 5.6 build 595 t2-patch	Trust: 0.8
vendor:	honeywell	model:	mpnvrswxx	scope:	eq	version:	nvr 5.6 build 595 t2-patch	Trust: 0.8
vendor:	honeywell	model:	maxpro nvr xe <nvr build t2-patch	scope:	eq	version:	5.6595	Trust: 0.6
vendor:	honeywell	model:	maxpro nvr se <nvr build t2-patch	scope:	eq	version:	5.6595	Trust: 0.6
vendor:	honeywell	model:	maxpro nvr pe <nvr build t2-patch	scope:	eq	version:	5.6595	Trust: 0.6
vendor:	honeywell	model:	mpnvrswxx <nvr build t2-patch	scope:	eq	version:	5.6595	Trust: 0.6
vendor:	maxpro nvr xe	model:	-	scope:	eq	version:	*	Trust: 0.2
vendor:	maxpro nvr se	model:	-	scope:	eq	version:	*	Trust: 0.2
vendor:	maxpro nvr pe	model:	-	scope:	eq	version:	*	Trust: 0.2
vendor:	mpnvrswxx	model:	-	scope:	eq	version:	*	Trust: 0.2
vendor:	hnmswvms	model:	-	scope:	eq	version:	*	Trust: 0.2
vendor:	hnmswvmslt	model:	-	scope:	eq	version:	*	Trust: 0.2

sources: IVD: 3ebfb0cf-1619-4d4f-b10e-edd86c0b655d // CNVD: CNVD-2020-03941 // JVNDB: JVNDB-2020-001718 // NVD: CVE-2020-6960

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2020-6960
value:	CRITICAL
Trust: 1.0
NVD:	JVNDB-2020-001718
value:	CRITICAL
Trust: 0.8
CNVD:	CNVD-2020-03941
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-202001-958
value:	CRITICAL
Trust: 0.6
IVD:	3ebfb0cf-1619-4d4f-b10e-edd86c0b655d
value:	HIGH
Trust: 0.2

nvd@nist.gov:	CVE-2020-6960
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
NVD:	JVNDB-2020-001718
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8
CNVD:	CNVD-2020-03941
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	3ebfb0cf-1619-4d4f-b10e-edd86c0b655d
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2

nvd@nist.gov:	CVE-2020-6960
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	JVNDB-2020-001718
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: IVD: 3ebfb0cf-1619-4d4f-b10e-edd86c0b655d // CNVD: CNVD-2020-03941 // JVNDB: JVNDB-2020-001718 // CNNVD: CNNVD-202001-958 // NVD: CVE-2020-6960

PROBLEMTYPE DATA

problemtype:

CWE-89

Trust: 1.8

sources: JVNDB: JVNDB-2020-001718 // NVD: CVE-2020-6960

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202001-958

TYPE

SQL injection

Trust: 0.8

sources: IVD: 3ebfb0cf-1619-4d4f-b10e-edd86c0b655d // CNNVD: CNNVD-202001-958

CONFIGURATIONS

sources: JVNDB: JVNDB-2020-001718

PATCH

title:	SN 2019-10-25 01	url:	https://www.security.honeywell.com/-/media/Security/Resources/PDF/Product-Warranty/Security_Notification_SN_2019-10-25_01-pdf.pdf	Trust: 0.8
title:	Patch for Multiple Honeywell Products SQL Injection Vulnerabilities	url:	https://www.cnvd.org.cn/patchInfo/show/199331	Trust: 0.6
title:	Multiple Honeywell product SQL Repair measures for injecting vulnerabilities	url:	http://123.124.177.30/web/xxk/bdxqById.tag?id=109233	Trust: 0.6

sources: CNVD: CNVD-2020-03941 // JVNDB: JVNDB-2020-001718 // CNNVD: CNNVD-202001-958

EXTERNAL IDS

db:	NVD	id:	CVE-2020-6960	Trust: 3.2
db:	ICS CERT	id:	ICSA-20-021-01	Trust: 3.0
db:	CNVD	id:	CNVD-2020-03941	Trust: 0.8
db:	CNNVD	id:	CNNVD-202001-958	Trust: 0.8
db:	JVNDB	id:	JVNDB-2020-001718	Trust: 0.8
db:	AUSCERT	id:	ESB-2020.0265	Trust: 0.6
db:	IVD	id:	3EBFB0CF-1619-4D4F-B10E-EDD86C0B655D	Trust: 0.2

sources: IVD: 3ebfb0cf-1619-4d4f-b10e-edd86c0b655d // CNVD: CNVD-2020-03941 // JVNDB: JVNDB-2020-001718 // CNNVD: CNNVD-202001-958 // NVD: CVE-2020-6960

REFERENCES

url:	https://www.us-cert.gov/ics/advisories/icsa-20-021-01	Trust: 3.0
url:	https://nvd.nist.gov/vuln/detail/cve-2020-6960	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-6960	Trust: 0.8
url:	https://www.auscert.org.au/bulletins/esb-2020.0265/	Trust: 0.6

sources: CNVD: CNVD-2020-03941 // JVNDB: JVNDB-2020-001718 // CNNVD: CNNVD-202001-958 // NVD: CVE-2020-6960

SOURCES

db:	IVD	id:	3ebfb0cf-1619-4d4f-b10e-edd86c0b655d
db:	CNVD	id:	CNVD-2020-03941
db:	JVNDB	id:	JVNDB-2020-001718
db:	CNNVD	id:	CNNVD-202001-958
db:	NVD	id:	CVE-2020-6960

LAST UPDATE DATE

2024-11-23T22:33:36.103000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2020-03941	date:	2020-02-06T00:00:00
db:	JVNDB	id:	JVNDB-2020-001718	date:	2020-02-21T00:00:00
db:	CNNVD	id:	CNNVD-202001-958	date:	2023-05-17T00:00:00
db:	NVD	id:	CVE-2020-6960	date:	2024-11-21T05:36:23.483

SOURCES RELEASE DATE

db:	IVD	id:	3ebfb0cf-1619-4d4f-b10e-edd86c0b655d	date:	2020-01-21T00:00:00
db:	CNVD	id:	CNVD-2020-03941	date:	2020-02-06T00:00:00
db:	JVNDB	id:	JVNDB-2020-001718	date:	2020-02-21T00:00:00
db:	CNNVD	id:	CNNVD-202001-958	date:	2020-01-21T00:00:00
db:	NVD	id:	CVE-2020-6960	date:	2020-01-22T15:15:11.617