What is CVE-2020-16280?

CVE-2020-16280 is a medium-severity vulnerability in Rangee Rangeeos, classified under Insufficiently Protected Credentials. CVSS score: 5.5/10. Published 2020-08-20.

How severe is CVE-2020-16280?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Rangee Rangeeos

CVE-2020-16280

Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for several external facing administrative services, domain joined users, and local administrators. To exploit the vulnerability a local attacker must have access to the underlying operating system.

EPSS: 0.003 (17.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Rangee Rangeeos — versions 8.0.4
N/a — versions n/a

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-16280?: CVE-2020-16280 is a medium-severity vulnerability in Rangee Rangeeos, classified under Insufficiently Protected Credentials. CVSS score: 5.5/10. Published 2020-08-20.
How severe is CVE-2020-16280?: Medium severity. CVSS v3 base score is 5.5 out of 10.