CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. Its EPSS score suggests a 40.2% probability of exploitation in the next 30 days. Exploitation may require the attacker to be authenticated.
CVE
CVE-2020-29390
Severity
CRITICAL
CVSS
9.8
EPSS
40.23%
Original NVD Description
Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker to execute a system command by using shell metacharacters and the %0a character.
Related CVEs
Other vulnerabilities affecting the same vendor(s)