Is CVE-2020-5632 actively exploited?

No active exploitation of CVE-2020-5632 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2020-5632 be exploited remotely?

No. CVE-2020-5632 requires local access to exploit.

What is the CVSS score of CVE-2020-5632?

CVE-2020-5632 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2020-5632

HIGH

CVE-2020-5632

NVD-CWE-noinfoPublished: October 6, 2020· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

InfoCage SiteShell series (Host type SiteShell for IIS V1.4, V1.5, and V1.6, Host type SiteShell for IIS prior to revision V2.0.0.6, V2.1.0.7, V2.1.1.6, V3.0.0.11, V4.0.0.6, V4.1.0.5, and V4.2.0.1, Host type SiteShell for Apache Windows V1.4, V1.5, and V1.6, and Host type SiteShell for Apache Windows prior to revision V2.0.0.6, V2.1.0.7, V2.1.1.6, V3.0.0.11, V4.0.0.6, V4.1.0.5, and V4.2.0.1) allow authenticated attackers to bypass access restriction and to execute arbitrary code with an elevated privilege via a specially crafted executable files.

NVD Source

Technical Analysis

CVE-2020-5632 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.