Unscored CVE-2020-25011 EUVD-2020-17711GHSA-mhq4-2r6p-x7vh

A sensitive information disclosure vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers Software Vers…

Published Dec 17, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

A sensitive information disclosure vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers Software Version:R0002.P05 allows remote attackers to get username and password by request /cgi-bin/webadminget.cgi script via the browser.

References

https://www.cnvd.org.cn/flaw/show/CNVD-2020-55988
https://github.com/AnfieldQi/CVE_list/blob/master/CVE-2020-25011.md