Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-27689

Опубликовано: 04 нояб. 2020
Источник: nvd
CVSS3: 9.8
CVSS2: 5
EPSS Низкий

Описание

The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains undocumented default admin credentials for the web management interface. A remote attacker could exploit this vulnerability to login and execute commands on the device, as well as upgrade the firmware image to a malicious version.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:imomobile:verve_connect_vh510_firmware:*:*:*:*:*:*:*:*
Версия до 1.0.1.6l0516 (исключая)
cpe:2.3:h:imomobile:verve_connect_vh510:l0am095a:*:*:*:*:*:*:*

EPSS

Процентиль: 81%
0.01564
Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-798

Связанные уязвимости

github логотип

GHSA-wqmf-63gp-6rjg

github
больше 3 лет назад

The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains undocumented default admin credentials for the web management interface. A remote attacker could exploit this vulnerability to login and execute commands on the device, as well as upgrade the firmware image to a malicious version.

EPSS

Процентиль: 81%
0.01564
Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-798