PoC Index

CVE-2020-5723

CRITICAL 9.8EPSS 5.9%

The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an attacker to retrieve all passwords and possibly gain elevated privileges.

CVSS v3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0
5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
5.89% chance of exploitation in the next 30 days, 93th percentile
Published
2020-03-30
Updated
2024-08-04

Proof-of-concept exploits (1)

References

Related