CVE-2020-9024

Publication date

2020-02-17 03:03:10

Family

mitre

State

PUBLISHED

Description

Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have world-writable permissions for the /root/cleardata.pl (executed as root by crond) and /root/loadperl.sh (executed as root at boot time) scripts.