{"id":"CVE-2020-12487","aliases":["EUVD-2020-4789","GHSA-qgcp-q9v9-wfx5"],"status":"published","title":"Command Execution Vulnerability in ABE service","description":"Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege.","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00269,"percentile":0.19235,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2024-12-17T02:53:22Z","modified":"2026-06-17T02:51:53Z","products":[{"vendor":"vivo","product":"abe"}],"references":[{"url":"https://www.vivo.com/en/support/security-advisory-detail?id=4"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12487"},{"url":"https://github.com/advisories/GHSA-qgcp-q9v9-wfx5"}],"sources":{"cve":[{"id":"CVE-2020-12487","title":"Command Execution Vulnerability in ABE service","description":"Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege.","status":"published","published":"2024-12-17T02:53:22.309Z","modified":"2024-12-17T14:44:40.238Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:52.925152Z"}],"euvd":[{"id":"EUVD-2020-4789","description":"Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege.","status":"published","published":"2024-12-17T02:53:22Z","modified":"2024-12-17T14:44:40Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-03T00:04:35.014369Z"}],"ghsa":[{"id":"GHSA-qgcp-q9v9-wfx5","title":"Due to the flaws in the verification of input parameters, the attacker can input carefully...","description":"Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege.","status":"published","published":"2024-12-17T03:31:42Z","modified":"2024-12-17T03:31:48Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:59:13.042537Z"}],"nvd":[{"id":"CVE-2020-12487","description":"Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege.","status":"published","published":"2024-12-17T03:15:06.453Z","modified":"2026-06-17T02:51:53.717Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:06:48.591569Z"}]}}