VDB
CVE-2020-11897
CVE-2020-11897
PUBLISHED
CVSS 8.699999809265137 HIGH
Das BIOS ist die Firmware bei IBM PC kompatiblen Computern. HP Laserjet ist die Laserdrucker-Produktreihe des Herstellers Hewlett Packard. Die Server Firmware stellt die Software-Grundbetriebskomponenten für Mainboards bereit. FreeFlow-Druckserver ist eine Druckserveranwendung für Xerox-Produktionsdrucker, die Flexibilität, umfangreiche Workflow-Optionen und eine Farbverwaltung bietet.
EPSS 1.84% · 83.3th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
1.84%
83.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| PaloAlto Networks | PaloAlto Networks PAN-OS | |
| HPE | HPE Integrated Lights-Out 3 | |
| Palo Alto Networks | PaloAlto Networks PAN-OS | |
| Xerox | Xerox FreeFlow Print Server | |
| Cisco | Cisco Router | |
| HPE | HPE ProLiant | |
| Aruba | Aruba Switch | |
| HPE | HPE Integrated Lights-Out 5 | |
| HP | HP LaserJet | |
| Intel | Intel Server Firmware | |
| Dell | Dell Computer | |
| Aruba | Aruba ArubaOS | |
| Intel | Intel BIOS | |
| Eaton | Eaton UPS |
Timeline
- Jun 16, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- May 24, 2022 CVE Updated
- Sep 4, 2022 EPSS Score
- Nov 6, 2022 EPSS Score
- Mar 11, 2023 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2020/wid-sec-w-2023-0683.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0683 advisory
- https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/ETN-SB-2020-1008.pdf advisory
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04103en_us advisory
- https://www.jsof-tech.com/ripple20/ advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html advisory
- https://support.hp.com/emea_africa-en/document/c06640149 advisory
- https://www.se.com/ww/en/download/document/SESB-2020-168-01/ advisory
- https://www.us-cert.gov/ics/advisories/icsa-20-168-01 advisory
- https://www.kb.cert.org/vuls/id/257161 advisory
- https://security.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20J_for_B2XX.pdf advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC advisory
- https://www.dell.com/support/article/sln321836/dell-response-to-the-ripple20-vulnerabilities?lang=en advisory
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt advisory
- https://www.dell.com/support/article/sln321835/dsa-2020-150-dell-client-platform-security-update-for-treck-tcp-ip-stack-vulnerabilities-in-teradici-firmware-and-remote-workstation-cards?lang=en advisory
- https://security.paloaltonetworks.com/PAN-SA-2020-0007 advisory
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04012en_us advisory
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04021en_us advisory
- https://www.dell.com/support/kbdoc/de-de/000125440/dsa-2020-206-dell-client-platform-security-update-for-treck-tcp-ip-stack-vulnerabilities-in-teradici-firmware-and-remote-workstation-cards advisory