{"cve":"CVE-2020-8655","epss":{"score":0.5993},"kev":{"dateAdded":"2021-11-03T00:00:00+00:00","dueDate":"2022-05-03T00:00:00+00:00"},"mitre":{"cpes":[],"created":"2020-02-06T23:58:09+00:00","description":"An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2020/8xxx/CVE-2020-8655.json","references":["http://packetstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.html","http://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.html","https://github.com/EyesOfNetworkCommunity/eonconf/issues/8"],"title":null,"updated":"2025-10-21T23:35:52.277000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":["cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.3-0:*:*:*:*:*:*:*"],"created":"2020-02-07T00:15:09.613000+00:00","description":"An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.","metrics":{"cvssV2_0":{"score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C"},"cvssV3_0":{},"cvssV3_1":{"score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"cvssV4_0":{}},"nvd_repo_path":"2020/CVE-2020-8655.json","references":["http://packetstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.html","http://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.html","https://github.com/EyesOfNetworkCommunity/eonconf/issues/8","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8655"],"title":null,"updated":"2026-06-17T03:26:42.707000+00:00","vendors":["eyesofnetwork","eyesofnetwork$PRODUCT$eyesofnetwork"],"weaknesses":["CWE-269"]},"opencve":{"changes":[{"created":"2025-02-04T21:15:00+00:00","data":[{"details":{"added":{"kev":{"dateAdded":"2021-11-03"},"ssvc":{"options":{"Automatable":"no","Exploitation":"active","Technical Impact":"total"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"4912e89c-a461-4bd7-8933-0e124258059c"},{"created":"2025-10-21T19:30:00+00:00","data":[{"details":{"added":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8655"],"removed":[]},"type":"references"}],"id":"684b7f15-5cdc-4796-84e2-75d7b8cf16a9"},{"created":"2025-10-21T20:30:00+00:00","data":[{"details":{"added":[],"removed":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8655"]},"type":"references"}],"id":"95ff2477-7a25-469b-8a64-ba81edea5b68"},{"created":"2025-10-22T00:30:00+00:00","data":[{"details":{"added":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8655"],"removed":[]},"type":"references"}],"id":"76c613d6-1bcc-4ff0-be50-2e2ce0866b5c"}],"cpes":{"data":["cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.3-0:*:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2020-02-06T23:58:09+00:00","provider":"mitre"},"description":{"data":"An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{"score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C"},"provider":"nvd"},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"provider":"vulnrichment"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.5993},"provider":"first"},"kev":{"data":{"dateAdded":"2021-11-03T00:00:00+00:00","dueDate":"2022-05-03T00:00:00+00:00"},"provider":"cisa"},"ssvc":{"data":{"options":{"Automatable":"no","Exploitation":"active","Technical Impact":"total"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["http://packetstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.html","http://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.html","https://github.com/EyesOfNetworkCommunity/eonconf/issues/8","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8655"],"providers":["mitre","nvd","vulnrichment"]},"title":{"data":null,"provider":null},"updated":{"data":"2025-11-10T14:42:04.797000+00:00","provider":"nvd"},"vendors":{"data":["eyesofnetwork","eyesofnetwork$PRODUCT$eyesofnetwork"],"providers":["nvd"]},"weaknesses":{"data":["CWE-269"],"providers":["nvd","vulnrichment"]}},"vulnrichment":{"cpes":[],"created":"2020-02-06T23:58:09+00:00","description":"An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"cvssV4_0":{},"kev":{"dateAdded":"2021-11-03"},"ssvc":{"options":{"Automatable":"no","Exploitation":"active","Technical Impact":"total"},"version":"2.0.3"}},"references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8655"],"title":null,"updated":"2025-02-04T20:18:16.779000+00:00","vendors":[],"vulnrichment_repo_path":"2020/8xxx/CVE-2020-8655.json","weaknesses":["CWE-269"]}}