VULNERABILITY INTELLIGENCE
CVE-2020-6760
CVSS score9.8 CRITICAL
EPSS probability1.71%
CISA KEVNot currently listed
Published2020-02-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Schmid ZI 620 V400 VPN 090 routers allow an attacker to execute OS commands as root via shell metacharacters to an entry on the SSH subcommand menu, as demonstrated by ping.
Weakness classification
- nvd@nist.gov: CWE-78
Primary references
- cve@mitre.org — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory