Is CVE-2020-8797 actively exploited?

No active exploitation of CVE-2020-8797 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2020-8797 be exploited remotely?

No. CVE-2020-8797 requires local access to exploit.

What is the CVSS score of CVE-2020-8797?

CVE-2020-8797 has a CVSS score of 6.7 (MEDIUM).

HOME VULNERABILITIESCVE-2020-8797

MEDIUM

CVE-2020-8797

CWE-78Published: April 23, 2020· Updated: Jun 17, 2026

6.7

CVSS v3.1

Official Description

Juplink RX4-1500 v1.0.3 allows remote attackers to gain root access to the Linux subsystem via an unsanitized exec call (aka Command Line Injection), if the undocumented telnetd service is enabled and the attacker can authenticate as admin from the local network.

NVD Source

Technical Analysis

CVE-2020-8797 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 6.7.