Vulnerability in Lindy-International 42633
CVE-2020-15058
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.
EPSS: 0.003 (24.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Lindy-international 42633
- Lindy-international 42633_firmware — versions 2.078.000
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Third Party Advisory, x_refsource_MISC, Broken Link)
Frequently asked questions
- What is CVE-2020-15058?
- CVE-2020-15058 is a high-severity vulnerability in Lindy-International 42633, classified under Cleartext Transmission of Sensitive Information. CVSS score: 8.8/10. Published 2020-08-07.
- How severe is CVE-2020-15058?
- High severity. CVSS v3 base score is 8.8 out of 10.