Skip to content
OpenAdvisories
High · 7.5 CVE-2020-37135 EUVD-2020-31104GHSA-ffff-75w5-5j62

AMSS++ 4.7 - Backdoor Admin Account

Published Feb 6, 2026 · Updated Mar 5, 2026 · Assigned by VulnCheck

Description

AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials. Attackers can log in with the default admin username and password '1234' to gain unauthorized administrative access to the system.

Affected products

VendorProductAffectedFixed
Amssplus AMSS++ 4.7 —

References