Approved changes feed: RSS · Atom

cpe:2.3:o:iteris:vantage_velocity_firmware:3.0:*:*:*:*:*:*:*

part: o version: 3.0 update: *

VendorIteris (eed6c78c-f397-5b56-bea7-833e5c10b855)
ProductVantage Velocity Firmware (a3d99724-9f0b-58b2-9fbc-5feae21845f6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9020 vulnerable 2026-06-08 05:27:20.257394 Details available
Iteris Vantage Velocity Field Unit 2.3.1, 2.4.2, and 3.0 devices allow the injection of OS commands into cgi-bin/timeconfig.py via shell metacharacters in the NTP Server field.
Published: 2020-02-17T03:03:49.000Z
Updated: 2024-08-04T10:19:19.630Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.