CVE-2020-24053

Katalog CVE

CVSS 7.5 · High EPSS 1,2%

Kerentanan Use of Hard-coded Credentials pada moog exvf5c-2 firmware, moog exvp7c2-3 firmware. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Moog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability. This could cause a confidentiality issue when using the FTP, Telnet, or SSH protocols.

Rincian

Terbit di NVD

21 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 68,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://ioac.tv/3hy1xu6 exploit · advisory pihak ketiga
• https://ioactive.com/moog-exo-series-multiple-vulnerabilities/ advisory pihak ketiga