CVE-2020-19417

Name of the Vulnerable Software and Affected Versions: Emerson Smart Wireless Gateway 1420 version 4.6.59

Description: The issue allows non-privileged users, such as the default account maint, to perform administrative tasks by sending specially crafted HTTP requests to the application.

Recommendations: For Emerson Smart Wireless Gateway 1420 version 4.6.59, consider restricting access to administrative tasks for non-privileged users, such as the default account maint, until a patch is available. As a temporary workaround, restrict the ability to send specially crafted HTTP requests to the application.