CVE-2020-10549

30Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 32%

probabilidade de exploração

32%top 2% das CVEs

exploração observada

nãonenhuma fonte reporta

rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices.

Produtos afetados

n/a · n/a

Referências

https://github.com/theguly/exploits/blob/master/CVE-2020-10549.py https://theguly.github.io/2020/09/rconfig-3.9.4-multiple-vulnerabilities/