CVE-2020-5686
High
Description
Incorrect implementation of authentication algorithm issue in UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to access the remote system maintenance feature and obtain the information by sending a specially crafted request to a specific URL.
SeverityHigh
CVSS7.5
Exploit probability—
ProductNec Univerge Sv9500 Firmware
PublishedJan 13, 2021
First seenJan 13, 2021
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nec univerge_sv9500_firmware | v1 ≤ v ≤ v7 | — |
| nec univerge_sv8500_firmware | s6 ≤ v ≤ s8 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.