MEDIUM
The S
Published Apr 6, 2020
6.6
MEDIUMCVSS 3.1
EPSS 1.01%
Description
The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 has a passwordless ftp ssh user. By using an exploit chain, an attacker with access to the network can get root access on the gateway.
Affected products
No data.
AND
- < 1.2.4
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30290 Advisory
- https://research.hisolutions.com/2020/04/open-the-gates-insecurity-of-cloudless-smart-door-systems/ x_refsource_MISCExploitThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30290 | Advisory | |
| https://research.hisolutions.com/2020/04/open-the-gates-insecurity-of-cloudless-smart-door-systems/ | x_refsource_MISCExploitThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 6, 2020
Updated Aug 4, 2024
Reserved Feb 28, 2020
Link CVE-2020-9473
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2020-30290 Assigner mitre
Published Apr 6, 2020
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2020-30290