CVE-2020-9525

Name of the Vulnerable Software and Affected Versions CS2 Network P2P versions 2.x through 3.x

Description The issue allows remote attackers to perform a man-in-the-middle attack, enabling them to eavesdrop on user video/audio streams, capture credentials, and compromise devices. This affects millions of Internet of Things devices.

Recommendations For versions 2.x through 3.x, as a temporary workaround, consider restricting access to sensitive data and disabling any features that rely on the vulnerable authentication mechanism until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.