CVE-2020-10547
30Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 33%
probabilidad de explotación
33%top 2% de las CVE
explotación observada
noninguna fuente lo reporta
rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices.
Productos afectados
n/a · n/a