Share:

CVE-2020-9024 - Iteris Vantage Velocity Firmware

February 17, 2020

Critical 9.8

Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have world-writable permissions for the /root/cleardata.pl (executed as root by crond) and /root/loadperl.sh (executed as root at boot time) scripts.

Affected software

Iteris Vantage Velocity Firmware

Reference links

https://sku11army.blogspot.com/2020/01/iteris-vantage-velocity-field-unit.html

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.