Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-2dax-4ghn-mffp
Vulnerability ID VCID-2dax-4ghn-mffp
Aliases CVE-2020-15877
GHSA-3c33-3465-fhx2
Summary
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-668 Exposure of Resource to Wrong Sphere
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2020-15877
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2020-15877
cvssv3.1 8.8 https://community.librenms.org/c/announcements
generic_textual HIGH https://community.librenms.org/c/announcements
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-3c33-3465-fhx2
cvssv3.1 8.8 https://github.com/librenms/librenms/commit/e5bb6d80bc308fc56b9a01ffb76c34159995353c
generic_textual HIGH https://github.com/librenms/librenms/commit/e5bb6d80bc308fc56b9a01ffb76c34159995353c
cvssv3.1 8.8 https://github.com/librenms/librenms/compare/1.65...1.65.1
generic_textual HIGH https://github.com/librenms/librenms/compare/1.65...1.65.1
cvssv3.1 8.8 https://github.com/librenms/librenms/pull/11915
generic_textual HIGH https://github.com/librenms/librenms/pull/11915
cvssv3.1 8.8 https://github.com/librenms/librenms/releases/tag/1.65.1
generic_textual HIGH https://github.com/librenms/librenms/releases/tag/1.65.1
cvssv3.1 8.8 https://nvd.nist.gov/vuln/detail/CVE-2020-15877
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2020-15877
cvssv3.1 8.8 https://shielder.it/blog
generic_textual HIGH https://shielder.it/blog
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2020-15877
https://community.librenms.org/c/announcements
https://github.com/librenms/librenms/commit/e5bb6d80bc308fc56b9a01ffb76c34159995353c
https://github.com/librenms/librenms/compare/1.65...1.65.1
https://github.com/librenms/librenms/pull/11915
https://github.com/librenms/librenms/releases/tag/1.65.1
https://nvd.nist.gov/vuln/detail/CVE-2020-15877
https://shielder.it/blog
GHSA-3c33-3465-fhx2 https://github.com/advisories/GHSA-3c33-3465-fhx2
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://community.librenms.org/c/announcements
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/librenms/librenms/commit/e5bb6d80bc308fc56b9a01ffb76c34159995353c
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/librenms/librenms/compare/1.65...1.65.1
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/librenms/librenms/pull/11915
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/librenms/librenms/releases/tag/1.65.1
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2020-15877
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://shielder.it/blog
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.13909
EPSS Score 0.00044
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-12T01:53:05.560274+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.6.0