CVE-2020-10207

Name of the Vulnerable Software and Affected Versions Amino Communications AK45x series Amino Communications AK5xx series Amino Communications AK65x series Amino Communications Aria6xx series Amino Communications Aria7/AK7Xx series Amino Communications Kami7B

Description The issue concerns the use of hard-coded credentials in EntoneWebEngine, allowing remote attackers to retrieve and modify device settings.

Recommendations For Amino Communications AK45x series, consider disabling remote access to the device until a fix is available. For Amino Communications AK5xx series, restrict access to the device settings to minimize the risk of exploitation. For Amino Communications AK65x series, avoid using the default credentials for the EntoneWebEngine. For Amino Communications Aria6xx series, change the default credentials to custom ones to prevent unauthorized access. For Amino Communications Aria7/AK7Xx series, limit the access to the device settings through the EntoneWebEngine. For Amino Communications Kami7B, disable the EntoneWebEngine if possible, until a secure solution is implemented.