CVE-2020-22159

high

Description

EVERTZ devices 3080IPX exe-guest-v1.2-r26125, 7801FC 1.3 Build 27, and 7890IXG V494 are vulnerable to Arbitrary File Upload, allowing an authenticated attacker to upload a webshell or overwrite any critical system files.

References

https://sku11army.blogspot.com/2020/02/evertz-path-transversal-arbitrary-file.html

https://cacharros-inthewild.blogspot.com/2023/07/the-3080ipx-is-integrated-multicast.html

Details

Source: Mitre, NVD

Published: 2023-07-18

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H