CVE-2019-20026

EPSS 0.43%
Published 29.07.2020 18:15:13
Last modified 21.11.2024 04:37:55
Source cve@mitre.org
Teams watchlist Login
Open Login

The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all existing usernames and passwords to default values via a crafted request.

Affected products Warnungen 0 Metrics 3 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Nec ≫ Sv9100 Firmware Version >= 7.0

Nec ≫ Sv9100 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.43%	0.595

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

https://shadytel.su/files/nec_cve.txt

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-20026

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-20026

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-20026

EUVD