CVE-2020-12133

Published: Apr 27, 2020Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The Apros Evolution, ConsciusMap, and Furukawa provisioning systems through 2.8.1 allow remote code execution because of javax.faces.ViewState Java deserialization.

Affected (1)

Products: Farukawa: Electric Consciousmap

Farukawa

1 product

Electric Consciousmap

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Farukawa Electric Consciousmap	Up to 2.8.1

Related CWEs

CWE-502

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (6)

http://packetstormsecurity.com/files/157383/Furukawa-Electric-ConsciusMAP-2.8.1-Java-Deserialization-Remote-Code-Execution.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://www.furukawa.co.jp

Source: cve@mitre.org

Product

https://www.tecnoredsa.com.ar

Source: cve@mitre.org

Product

http://packetstormsecurity.com/files/157383/Furukawa-Electric-ConsciusMAP-2.8.1-Java-Deserialization-Remote-Code-Execution.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

https://www.furukawa.co.jp

Source: af854a3a-2127-422b-91ae-364da2661108

Product

https://www.tecnoredsa.com.ar

Source: af854a3a-2127-422b-91ae-364da2661108

Product

Timeline

No history available yet.