CVE-2020-12133

CRITICAL

Farukawa Electric Consciousmap < 2.8.1 - Insecure Deserialization

Title source: rule

Description

The Apros Evolution, ConsciusMap, and Furukawa provisioning systems through 2.8.1 allow remote code execution because of javax.faces.ViewState Java deserialization.

References (3)

[Exploit, Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/157383/Furukawa-Electric-ConsciusMAP-2.8.1-Java-Deserialization-Remote-Code-Execution.html

[Product] https://www.furukawa.co.jp

[Product] https://www.tecnoredsa.com.ar

Scores

CVSS v3 9.8

EPSS 0.0808

EPSS Percentile 92.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-502

Status published

Affected Products (1)

farukawa/electric_consciousmap < 2.8.1

Timeline

Published Apr 27, 2020

Tracked Since Feb 18, 2026