Vulnerability · Published Dec 1, 2020 · Assigned by schneider
CVE-2020-7548
Critical 9.8
In plain English
A critical-severity weak randomness in Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 74% of all known vulnerabilities).
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)1.5%top 26.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information) that could allow unauthorized users to login.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information) | Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information) |
Weakness: CWE-330
References
- https://www.se.com/ww/en/download/document/SEVD-2020-287-03/ x_refsource_MISC