CVE-2020-16147

CRITICAL

Telmat AccessLog <= 6.0(TAL_20180415) - Unauthenticated Remote Code Execution via Login Page

Title source: llm
STIX 2.1

Description

The login page in Telmat AccessLog <= 6.0 (TAL_20180415) allows an attacker to get root shell access via Unauthenticated code injection over the network.

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://podalirius.net/cves/2020-16147/
Exploit, Third Party Advisory x_refsource_misc
https://podalirius.net/en/cves/2020-16147/

Scores

CVSS v3 9.8
EPSS 0.0204
EPSS Percentile 78.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-78
Status published
Products (3)
telmat/accesslog_firmware < 6.0\(tal_20180415\)
telmat/educ\@box_firmware < 6.0\(tal_20180415\)
telmat/git\@box_firmware < 6.0\(tal_20180415\)
Published Sep 24, 2020
Tracked Since Feb 18, 2026