Vulnerability · Published Nov 17, 2020 · Assigned by mitre
CVE-2020-25988
Medium 6.5
In plain English
A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.1% (higher than 88% of all known vulnerabilities).
Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)3.1%top 12.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
UPNP Service listening on port 5555 in Genexis Platinum 4410 Router V2.1 (P4410-V2–1.34H) has an action 'X_GetAccess' which leaks the credentials of 'admin', provided that the attacker is network adjacent.
Affected products (as reported)
References
- https://youtu.be/GOMLavacqSI x_refsource_MISC
- https://medium.com/%40niteshsurana/424f0db73129 x_refsource_MISC
- https://github.com/ideaengine007/RandomStuffs/blob/main/Version_Vulnerable.PNG x_refsource_MISC
- https://www.exploit-db.com/exploits/49075 x_refsource_MISC
