CVE-2020-10288

Katalog CVE

CVSS 9.8 · Critical EPSS 1,4%

Kerentanan Improper Access Control pada abb robotware. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

IRC5 exposes an ftp server (port 21). Upon attempting to gain access you are challenged with a request of username and password, however you can input whatever you like. As long as the field isn't empty it will be accepted.

Rincian

Terbit di NVD

15 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control
CWE-287: Improper Authentication

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 72,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/aliasrobotics/RVD/issues/3327 advisory pihak ketiga