PT-2020-19639

CVE-2020-7590

·

Published

2020-10-13

·

Updated

2020-10-29

Description by

CVSS 3.1
6.8
Medium
MetricsAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running software V4.4.0 are also affected by CVE-2020-15797). Affected devices use a hard-coded password to protect the onboard database. This could allow an attacker to read and or modify the onboard database. Successful exploitation requires direct physical access to the device.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-259: Use of Hard-coded Password
Related identifiers
CVE-2020-7590
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com