Back to Database
Status published
High
CVE-2020-24057
The management website of the Verint S5120FD Verint_FW_0_42 unit features...
Vulnerability Description
The management website of the Verint S5120FD Verint_FW_0_42 unit features a CGI endpoint ('ipfilter.cgi') that allows the user to manage network filtering on the unit. This endpoint is vulnerable to a command injection. An authenticated attacker can leverage this issue to execute arbitrary commands as 'root'.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-24057
Credits & Attribution
No credits recorded in the NVD database.
References
More from verint
View All →CVE-2021-41825
Verint Workforce Optimization (WFO) 15.2.5.1033 allows HTML injection via the...
Medium
5.3
CVE-2021-36450
Verint Workforce Optimization (WFO) 15.2.8.10048 allows XSS via the control/my_notifications...
Medium
6.1
CVE-2020-24056
A hardcoded credentials vulnerability exists in Verint 5620PTZ Verint_FW_0_42, Verint...
High
7.5
CVE-2020-24055
Verint 5620PTZ Verint_FW_0_42 and Verint 4320 V4320_FW_0_23, and V4320_FW_0_31 units...
Critical
9.8
CVE-2020-23446
Verint Workforce Optimization suite 15.1 (15.1.0.37634) has Unauthenticated Information Disclosure...
Medium
5.3
Affected Vendor
verint
View all reports →Affected Software
s5120fd firmware
Vulnerable Versions:
verint_fw_0_42
Timeline
Official Publish:
August 21st, 2020
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.