CVE-2020-9023

Critical

Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have two users that are not documented and are configured with weak passwords…

mitre·CWE-521·Published 2020-02-17

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

244 chars

Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have two users that are not documented and are configured with weak passwords (User bluetooth, password bluetooth; User eclipse, password eclipse). Also, bluetooth is the root password.

NVDen

244 chars

NVDes

300 chars

Los dispositivos Iteris Vantage Velocity Field Unit versiones 2.3.1 y 2.4.2, poseen dos usuarios que no están documentados y están configurados con contraseñas débiles (Usuario bluetooth, contraseña bluetooth; Usuario eclipse, contraseña eclipse). Además, bluetooth es la contraseña del usuario root.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H