CVE-2020-5664 - Deserialization of untrusted data vulnerability in XooNIps 3.49 and earlier allows remote attackers to execute arbitrary code via unspecified vectors

Back Back to CVE browser

CRITICAL

Deserialization of untrusted data vulnerability in XooNIps 3.49 and earlier allows remote attackers to execute arbitrary code via unspecified vectors

Published Nov 16, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.73%

Description

Deserialization of untrusted data vulnerability in XooNIps 3.49 and earlier allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

Vendor n/a Product XooNIps Default
unknown
Affected
- 3.49 and earlier

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	XooNIps	unknown	Affected 3.49 and earlier

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26825
Advisory
https://jvn.jp/en/vu/JVNVU92053563/index.html
x_refsource_MISCThird Party Advisory
https://xoonips.osdn.jp/modules/news/index.php?page=article&storyid=13
x_refsource_MISCRelease NotesVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26825		Advisory
https://jvn.jp/en/vu/JVNVU92053563/index.html		x_refsource_MISCThird Party Advisory
https://xoonips.osdn.jp/modules/news/index.php?page=article&storyid=13		x_refsource_MISCRelease NotesVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner jpcert

Published Nov 16, 2020

Updated Aug 4, 2024

Reserved Jan 6, 2020

Link CVE-2020-5664

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-5664

Red Hat

No data

ENISA EUVD

Assigner jpcert

Published Nov 16, 2020

Updated Aug 4, 2024

Link EUVD-2020-26825

GitHub

No data