CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2020-8963
TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300 1.0.003, and T550 1.0.003 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the t3.cgi srmodel or srtime parameter.
Severity
- EPSS
- 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- timetoolsltd:sc7105_firmware
- timetoolsltd:sc9205_firmware
- timetoolsltd:sc9705_firmware
- timetoolsltd:sr7110_firmware
- timetoolsltd:sr9210_firmware
- timetoolsltd:sr9750_firmware
- timetoolsltd:sr9850_firmware
- timetoolsltd:t100_firmware
- timetoolsltd:t300_firmware
- timetoolsltd:t550_firmware