CVE-2020-7590CWE-259

A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590

published October 13, 2020

CVSS
—
EPSS
0%
Percentile
27.7
In the wild
Unconfirmed
What it is

A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running software V4.4.0 are also affected by CVE-2020-15797). Affected devices use a hard-coded password to protect the onboard database. This could allow an attacker to read and or modify the onboard database. Successful exploitation requires direct physical access to the device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00353 · 27.7th percentile
Weakness
CWE-259 · Use of Hard-coded Password
Published
2020-10-13T15:30Z
EPSS history
Timeline
  • 13 OCT 15:30Z
    A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590
    cvelistv5