What’s Vulnerable › Vulnerabilities
CVE-2020-12487: Command Execution Vulnerability in ABE service
- Severity: high (CVSS 7.0 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-12-17 · updated 2026-06-17
- Weakness: CWE-20
Description
Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege.
Affected products
- vivo ABE: Versions earlier than 4.4.0.9
References
Get alerted when CVE-2020-12487 or the next vulnerability affects your stack