CVE-2020-10275

Name of the Vulnerable Software and Affected Versions No specific software name or affected versions are mentioned in the provided descriptions.

Description The issue concerns the generation of access tokens for a REST API, which are directly derived from publicly available default credentials for the web interface. Given a USERNAME and a PASSWORD, the token string is generated using base64(USERNAME:sha256(PASSWORD)). This allows an unauthorized attacker inside the network to compute the token and interact with the REST API, potentially leading to data exfiltration, infiltration, or deletion.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.