CVE-2020-15482 - An issue was discovered on Nescomed Multipara Monitor M1000 devices

Back Back to CVE browser

HIGH

An issue was discovered on Nescomed Multipara Monitor M1000 devices

Published Aug 26, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.20%

Description

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The device enables an unencrypted TELNET service by default, with a blank password for the admin account. This allows an attacker to gain root access to the device over the local network.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-287

Improper Authentication

CWE-319

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7475
Advisory
https://payatu.com/advisory/unauthenticated-telnet-service-in-niscomed-patient-monitor
x_refsource_MISCThird Party Advisory
https://www.niscomed.com/multipara-monitor.html
x_refsource_MISCProduct

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7475		Advisory
https://payatu.com/advisory/unauthenticated-telnet-service-in-niscomed-patient-monitor		x_refsource_MISCThird Party Advisory
https://www.niscomed.com/multipara-monitor.html		x_refsource_MISCProduct