CVE-2018-14528

Invoxia NVX220 devices allow TELNET access as admin with a default password

published July 5, 2019

CVSS
—
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

⚠️ A default password left unchecked means this device is an open door for anyone savvy enough to knock! 🌐 Think of it like a restaurant that has a side door unlocked for delivery, but never bothered to change the access code. Anyone could just walk in and mess with the kitchen without anyone knowing! An attacker could gain full admin access to the Invoxia NVX220 device, allowing them to intercept sensitive information or manipulate settings. This could lead to unauthorized access to other connected devices, making it a surprisingly sneaky risk for your network security.

Put simply

Think of it like a restaurant that has a side door unlocked for delivery, but never bothered to change the access code. Anyone could just walk in and mess with the kitchen without anyone knowing! The Invoxia NVX220 devices permit TELNET access for admins, using a default password that remains unchanged. This creates an opportunity for unauthorized users to access and control the device's functions remotely.

What to do

An attacker could gain full admin access to the Invoxia NVX220 device, allowing them to intercept sensitive information or manipulate settings. This could lead to unauthorized access to other connected devices, making it a surprisingly sneaky risk for your network security. Change the default password immediately to something strong and unique. Disable TELNET access if not needed, and ensure any connected devices are secured. Regularly review user accounts and remove any that are unnecessary. You’ve got this! Take these steps to lock down your device and boost your security status! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01961 · 80.0th percentile
Published
2019-07-05T19:48Z
EPSS history
Timeline
  • 05 JUL 19:48Z
    Invoxia NVX220 devices allow TELNET access as admin with a default password
    cvelistv5