CVE-2020-23036

Katalog CVE

CVSS 5.9 · Medium EPSS 1,1%

Kerentanan Insufficiently Protected Credentials pada medianavi smacom. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

MEDIA NAVI Inc SMACom v1.2 was discovered to contain an insecure session validation vulnerability in the session handling of the `password` authentication parameter of the wifi photo transfer module. This vulnerability allows attackers with network access privileges or on public wifi networks to read the authentication credentials and follow-up requests containing the user password via a man in the middle attack.

Rincian

Terbit di NVD

22 Oktober 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-522: Insufficiently Protected Credentials

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 65,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulnerability-lab.com/get_content.php?id=2211 exploit · advisory pihak ketiga
• https://cwe.mitre.org/data/definitions/522.html deskripsi teknis