CVE-2020-8006

{"id": "CVE-2020-8006", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2024-04-12T12:15:41.467", "references": [{"url": "https://circontrol.com/intelligent-charging-solutions/dc-chargers-series/raption-150/", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://seclists.org/fulldisclosure/2024/Mar/33", "tags": ["Mailing List"], "source": "cve@mitre.org"}, {"url": "http://seclists.org/fulldisclosure/2024/Mar/33", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://circontrol.com/intelligent-charging-solutions/dc-chargers-series/raption-150/", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://seclists.org/fulldisclosure/2024/Mar/33", "tags": ["Mailing List"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time control of the device as root. The ocpp1.5 and pwrstudio binaries on the charging station do not use a number of common exploitation mitigations. In particular, there are no stack canaries and they do not use the Position Independent Executable (PIE) format."}, {"lang": "es", "value": "El servidor en Circontrol Raption hasta 5.11.2 tiene un desbordamiento de b\u00fafer en la regi\u00f3n stack de la memoria de autenticaci\u00f3n previa que puede explotarse para obtener control en tiempo de ejecuci\u00f3n del dispositivo como root. Los binarios ocpp1.5 y pwrstudio en la estaci\u00f3n de carga no utilizan una serie de mitigaciones de explotaci\u00f3n comunes. En particular, no hay canarios de pila y no utilizan el formato ejecutable independiente de la posici\u00f3n (PIE)."}], "lastModified": "2025-11-04T19:15:40.023", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:circontrol:raption_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "90380BD4-1577-43CA-919D-55974517E129", "versionEndIncluding": "5.11.2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}