Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-05-03. Apply updates per vendor instructions.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
NØX Echo Lineage Signal: CVE-2020-8644 Entity: PlaySMS Lineage: Public vulnerability → Public exploit/PoC → Observed exploitation Relationship: - PlaySMS → CVE-2020-8644 → Evidence → Operational Risk Current State: DISCLOSED, POC_AVAILABLE, ACTIVE_EXPLOITATION
NØØT Security Alerts Classification: Critical CVE: CVE-2020-8644 Product: PlaySMS Summary: VulnCheck reports real-world exploitation activity affecting PlaySMS / PlaySMS. Evidence: Public PoC/exploit available; Active exploitation reported; Severe impact class Impact: The vulnerability has a severe impact class such as code execution, authentication bypass, account takeover, or privilege escalation. Action: Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable. Date: 03 Nov 2021 Source: https://vulncheck.com/xdb/7f9ab9f4fabb #NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #PlaySMS #CVE_2020_8644 #ActiveExploitation #Exploit
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | playsms | playsms | - | - | - |