CVE-2020-15063 - DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter

Back Back to CVE browser

HIGH

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter

Published Aug 7, 2020

8.8

HIGH

CVSS 3.1

EPSS 0.88%

Description

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7191
Advisory
https://research.hisolutions.com/2020/05/critical-vulnerabilites-in-multiple-usb-network-servers/
x_refsource_MISCBroken LinkThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7191		Advisory
https://research.hisolutions.com/2020/05/critical-vulnerabilites-in-multiple-usb-network-servers/		x_refsource_MISCBroken LinkThird Party Advisory