CVSS 3.1
8.0 highCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2020-7847
High (8.0) in iptime. EPSS 0.5% chance of exploitation in the next 30 days.
The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution. This issue affects: pTIME NAS 1.4.36.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
- CWE
- CWE-434
- Published
- Modified
- Record from
- the NVD, synced
Affected
- iptime:nas-i_firmware
- iptime:nas-ii_firmware
- iptime:nas-iie_firmware
- iptime:nas101_firmware
- iptime:nas1dual_firmware
- iptime:nas2dual_firmware
- iptime:nas3_firmware
- iptime:nas4_firmware
- iptime:nas4dual_firmware