What is CVE-2020-5721?

CVE-2020-5721 is a medium-severity vulnerability in Mikrotik Winbox, classified under CWE-260. CVSS score: 5.5/10. Published 2020-04-15.

How severe is CVE-2020-5721?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Mikrotik Winbox

CVE-2020-5721

MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw configuration file when the Keep Password field is set and no Master Password is set. Keep Password is set by default and, by default Master Passwo…

EPSS: 0.004 (30.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Mikrotik Winbox
N/a Mikrotik Winbox — versions 3.22 and below

Weakness classification (CWE)

CWE-260
CWE-522 — Insufficiently Protected Credentials

References

vulnreport@tenable.com (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-5721?: CVE-2020-5721 is a medium-severity vulnerability in Mikrotik Winbox, classified under CWE-260. CVSS score: 5.5/10. Published 2020-04-15.
How severe is CVE-2020-5721?: Medium severity. CVSS v3 base score is 5.5 out of 10.