Vulnerabilities > CVE-2020-25035 - Unspecified vulnerability in Ucopia Express Wireless Appliance

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
ucopia

Summary

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with root privileges using chroothole_client's PHP call, a related issue to CVE-2017-11322.

Vulnerable Configurations

Part Description Count
Application
Ucopia
1