CVE-2020-16148

HIGH

Telmat AccessLog < 6.0(TAL_20180415) - Authenticated Remote Code Execution via Ping Page

Title source: llm
STIX 2.1

Description

The ping page of the administration panel in Telmat AccessLog <= 6.0 (TAL_20180415) allows an attacker to get root shell access via authenticated code injection over the network.

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://podalirius.net/cves/2020-16148/
Exploit, Third Party Advisory x_refsource_misc
https://podalirius.net/en/cves/2020-16148/

Scores

CVSS v3 7.2
EPSS 0.0189
EPSS Percentile 77.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-78
Status published
Products (3)
telmat/accesslog_firmware < 6.0\(tal_20180415\)
telmat/educ\@box_firmware < 6.0\(tal_20180415\)
telmat/git\@box_firmware < 6.0\(tal_20180415\)
Published Sep 24, 2020
Tracked Since Feb 18, 2026