{"id":"CVE-2020-5685","aliases":["EUVD-2020-26844","GHSA-cchm-6hjg-chgx"],"status":"published","title":"UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute...","description":"UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands or cause a denial-of-service (DoS) condition by sending a specially crafted request to a specific URL.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01825,"percentile":0.78984,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2021-01-13T09:40:35Z","modified":"2026-06-17T03:22:05Z","products":[{"vendor":"nec","product":"univerge_sv8500_firmware"},{"vendor":"nec","product":"univerge_sv9500_firmware"},{"vendor":"nec corporation","product":"univerge sv9500/sv8500 series"}],"references":[{"url":"https://www.necplatforms.co.jp/en/press/security_adv.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://jvn.jp/en/jp/JVN38784555/index.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-5685"},{"url":"https://github.com/advisories/GHSA-cchm-6hjg-chgx"}],"sources":{"cve":[{"id":"CVE-2020-5685","description":"UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands or cause a denial-of-service (DoS) condition by sending a specially crafted request to a specific URL.","status":"published","published":"2021-01-13T09:40:35Z","modified":"2024-08-04T08:39:25.664Z","updated_at":"2026-11-02T14:35:47.56691Z"}],"euvd":[{"id":"EUVD-2020-26844","description":"UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands or cause a denial-of-service (DoS) condition by sending a specially crafted request to a specific URL.","status":"published","published":"2021-01-13T09:40:35Z","modified":"2024-08-04T08:39:25Z","updated_at":"2026-11-03T03:08:06.272693Z"}],"ghsa":[{"id":"GHSA-cchm-6hjg-chgx","title":"UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute...","description":"UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands or cause a denial-of-service (DoS) condition by sending a specially crafted request to a specific URL.","status":"published","published":"2022-05-24T17:39:00Z","modified":"2023-01-29T05:05:03Z","cwes":["CWE-78"],"updated_at":"2026-11-02T14:45:42.123832Z"}],"nvd":[{"id":"CVE-2020-5685","description":"UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands or cause a denial-of-service (DoS) condition by sending a specially crafted request to a specific URL.","status":"published","published":"2021-01-13T10:15:15.017Z","modified":"2026-06-17T03:22:05.483Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:06:28.892872Z"}]}}