conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field…

published 2020-10-02 6 y ago modified 2026-06-17 4 mo ago also EUVD-2020-6446

cvss: 7.5; version 3.1, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 5.3%; EPSS 5.3% chance of exploitation in 30 days, percentile 92%
public exploits: 0; none known

conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field (obtained from the web interface).

Exploit prediction

5.26% chance of exploitation in the next 30 days, higher than 92% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

syss.de https://www.syss.de/pentest-blog/syss-2020-024-und-syss-2020-025-zwei-schwachstellen-in-file-transfer-loesung-von-qiata referenced PoC, tagged "exploit" by a source, unverified
seclists.org http://seclists.org/fulldisclosure/2020/Sep/51 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	3.1	7.5	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD	2.0	8.5	AV:N/AC:M/Au:S/C:C/I:C/A:C

Classification

Weakness

CWE-78 Improper Neutralization of Special Elements used in an OS Command

References

syss.de /pentest-blog/syss-2020-024-und-syss-2020-025-zwei-schwachstellen-in-file-transfer-loesung-von-qiata
exploit, third-party-advisory
seclists.org /fulldisclosure/2020/Sep/51
exploit, mailing-list, third-party-advisory
secudos.de /en/news-en/domos-release-5-9
release-notes, vendor-advisory
syss.de /fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-025.txt
third-party-advisory
github.com /patrickhener/CVE-2020-14293
third-party-advisory

Sources

CVE List CVE-2020-14293
NVD CVE-2020-14293

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary