Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-25848 EUVD-2020-18481GHSA-qf9m-hx8v-j382

HGiga MailSherlock - Broken Authentication

Published Dec 31, 2020 · Updated Sep 17, 2024 · Assigned by twcert

Description

HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism.

Affected products

VendorProductAffectedFixed
HGiga MailSherlock MSR45/SSR45 unspecified – < 243, unspecified – < 114, unspecified – < 122, unspecified – < 143, unspecified – < 130 243

References