CVE-2020-12020

MEDIUM Year: 2020
CVSS v3 Score
6.1
Medium
CVSS v2 Score
3.6
Low
Weakness Type
CWE-668
View all →

Vulnerability Description

Baxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13 and ExactaMix EM1200 Versions 1.1, 1.2, and 1.4 does not restrict non administrative users from gaining access to the operating system and editing the application startup script. Successful exploitation of this vulnerability may allow an attacker to alter the startup script as the limited-access user.

Related Vulnerabilities

CVE-2022-31596

MEDIUM
CVSS:6.0(Medium)

Under certain conditions, an attacker authenticated as a CMS administrator and with high privileges access to the Network in SAP BusinessObjects Business Intelligence Platform (Monitoring DB) - versio...

CWE-6682022

CVE-2019-12904

MEDIUM
CVSS:5.9(Medium)

In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on pl...

CWE-6682019

CVE-2020-11934

MEDIUM
CVSS:5.9(Medium)

It was discovered that snapctl user-open allowed altering the $XDG_DATA_DIRS environment variable when calling the system xdg-open. OpenURL() in usersession/userd/launcher.go would alter $XDG_DATA_DIR...

CWE-6682020

CVE-2020-13946

MEDIUM
CVSS:5.9(Medium)

In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to ma...

CWE-6682020

CVE-2022-40234

MEDIUM
CVSS:5.9(Medium)

Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a certificate inside the generated .crt file when uploading a TLS certificate to IBM ...

CWE-6682022

CVE-2016-5787

MEDIUM
CVSS:6.3(Medium)

General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors.

CWE-6682016