CVE-2020-36877 in Serious Play F3 Media Server

Riassunto

di MITRE • 05/12/2025

ReQuest Serious Play F3 Media Server 7.0.3 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands as the web server user. Attackers can upload PHP executable files via the Quick File Uploader page, resulting in remote code execution on the server.

Once again VulDB remains the best source for vulnerability data.

• Responsabile: VulnCheck
• Prenotare: 05/12/2025
• Divulgazione: 05/12/2025
• Moderazione: accettato
• Voce: VDB-334532
• CPE: pronto
• CWE: CWE-78 (confermato)
• Sfruttamento: Scaricare
• CVSS: 9.8 (VulDB)
• EPSS: 0.00628
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-36877
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-36877
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-36877/