CVE-2020-35585

In Solstice Pod before 3.3.0 (or Open4.3), the screen key can be enumerated using brute-force attacks via the /lookin/info Solstice Open Control API because…

published December 23, 2020

CVSS
—
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

In Solstice Pod before 3.3.0 (or Open4.3), the screen key can be enumerated using brute-force attacks via the /lookin/info Solstice Open Control API because there are only 1.7 million possibilities.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01369 · 71.7th percentile
Published
2020-12-23T14:56Z
EPSS history
Timeline
  • 23 DEC 14:56Z
    In Solstice Pod before 3.3.0 (or Open4.3), the screen key can be enumerated using brute-force attacks via the /lookin/info Solstice Open Control API because…
    cvelistv5