VULNERABILITY INTELLIGENCE

CVE-2020-3925

CVSS score8.3 HIGH
EPSS probability2.77%
CISA KEVNot currently listed
Published2020-02-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Description

A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers are able to launch RCE and executes arbitrary command on target system via malicious crafted scripts.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references