PT-2020-20524

CVE-2020-9208

·

Published

2020-12-29

·

Updated

2021-07-21

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions iManager NetEco 6000 version V600R021C00
Description The issue is related to an information leak due to a lack of authentication in a module. Attackers without access to the module can exploit this to obtain extra information.
Recommendations For iManager NetEco 6000 version V600R021C00, consider restricting access to the vulnerable module to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾