CVE-2020-37027: Sickbeard alpha OS Command Injection via Extra Scripts Setting
CVE-2020-37027 is a critical OS command injection flaw (CWE-78) in Sickbeard alpha, which the record says can be triggered by unauthenticated remote attackers through the extra scripts configuration. VulnCheck scores it 9.8 under CVSS 3.1 and 9.3 under CVSS 4.0. The record lists no KEV entry, no affected version ranges and no fixed version, so defenders should focus on isolating or removing exposed installations.
Overview
CVE-2020-37027 describes a remote command injection flaw classified as CWE-78 (OS Command Injection) in Sickbeard alpha. According to the record, the extra scripts configuration field can hold malicious commands that are later processed, leading to remote code execution on the vulnerable installation.
Impact
The record states that unauthenticated attackers can execute arbitrary commands. The CVSS 3.1 base score of 9.8 (critical), with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, reflects network reachability, low complexity, no privileges required and no user interaction, with high impact to confidentiality, integrity and availability. VulnCheck also provides a CVSS 4.0 score of 9.3.
Affected products and versions
- The record identifies the product as Sickbeard alpha. No affected version ranges are listed in the structured data.
- No fixed version is listed in the record. This does not confirm that no fix exists.
- The record references the project repository on GitHub and an archived snapshot of the project website.
Exploitation status
The CVE is not listed in the CISA KEV catalog in this record, so active exploitation cannot be confirmed from the sources consulted. The record references a public Exploit-DB entry, but its presence does not confirm exploitation in the wild.
Remediation and mitigation
- Identify every Sickbeard installation in your environment, including forgotten, test or legacy instances.
- Because no fixed version is listed, prioritize removing the application from internet-facing systems or restricting access to trusted networks only.
- Review the extra scripts configuration for unexpected values and limit who can change application settings.
- Consider migrating to a maintained alternative, since the project appears to be legacy software (inference based on the archived website reference).
Detection guidance
- Audit changes to the extra scripts setting and compare them against a known-good configuration baseline.
- Watch for unexpected child processes started by the Sickbeard service and for unusual outbound connections from its host.
- Review web server and application logs for requests to configuration functions from unknown sources.
Limitations of the available information
The record does not include affected version ranges, fixed versions, EPSS, SSVC or vendor remediation guidance. The source did not provide a title, so the title here was written for this portal. The current maintenance status of the project is not confirmed by the record.
Frequently asked questions
Is CVE-2020-37027 being actively exploited?
The CVE is not listed in the CISA KEV catalog in this record, so active exploitation cannot be confirmed from the sources consulted. A public Exploit-DB entry is referenced, but that alone does not confirm exploitation in the wild.
What is the severity of CVE-2020-37027?
VulnCheck assigns a CVSS 3.1 base score of 9.8 (critical) and a CVSS 4.0 score of 9.3. The record describes unauthenticated remote command execution through the extra scripts setting.
Which version of Sickbeard is fixed?
The record does not list any fixed version. The absence of a listed fix does not confirm that none exists, so the status should be verified with the project or an alternative source.
This analysis was drafted with AI assistance from verified source data and automatically checked against it.