CVE-2020-10549
30Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 32%
probabilidad de explotación
32%top 2% de las CVE
explotación observada
noninguna fuente lo reporta
rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices.
Productos afectados
n/a · n/a