CVE-2020-21996

Published: Apr 28, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to cause a denial of service scenario.

Affected (7)

Products: Ave: Dominaplus, 53ab Wbs Firmware, Ts01 Firmware, Ts03x V Firmware, Ts04x V Firmware, Ts05 Firmware, Ts05n V Firmware

7 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ave Dominaplus	From 1.8.4 to 1.10.77

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ave 53ab Wbs Firmware	Version 1.10.62

Running on/with	Platform Versions
Ave 53ab Wbs	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ave Ts01 Firmware	Version 1.0.65

Running on/with	Platform Versions
Ave Ts01	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ave Ts03x V Firmware	Version 1.10.45a

Running on/with	Platform Versions
Ave Ts03x V	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ave Ts04x V Firmware	Version 1.10.45a

Running on/with	Platform Versions
Ave Ts04x V	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ave Ts05 Firmware	Version 1.10.36

Running on/with	Platform Versions
Ave Ts05	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ave Ts05n V Firmware	All versions

Running on/with	Platform Versions
Ave Ts05n V	All versions

Related CWEs

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (6)

https://cwe.mitre.org/data/definitions/306.html

Source: cve@mitre.org

Technical Description

https://www.exploit-db.com/exploits/47820

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5548.php

Source: cve@mitre.org

ExploitThird Party Advisory

https://cwe.mitre.org/data/definitions/306.html

Source: af854a3a-2127-422b-91ae-364da2661108

Technical Description

https://www.exploit-db.com/exploits/47820

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5548.php

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.