Vulnerability · Published Feb 4, 2020 · Assigned by twcert

CVE-2020-3938SysJust Syuan-Gu-Da-Shih -Request-Forgery

Critical 9.8

In plain English

A critical-severity security flaw in Syuan-Gu-Da-Shih from CHANGING. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 74% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)1.5%top 25.9% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Request Forgery, allowing attackers to launch inquiries into network architecture or system files of the server via forged inquests.

Affected products (as reported)

Vendor	Product	Versions
CHANGING	Syuan-Gu-Da-Shih	0 – through 20191223

References

https://tvn.twcert.org.tw/taiwanvn/TVN-201910014 x_refsource_MISC
https://www.chtsecurity.com/news/a791f509-9782-4be1-b71f-22fc619f8215 x_refsource_MISC