CVEvulnerability
CVE-2020-10547
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-06-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices.
Affected configurations
• rconfig rconfig (<= 3.9.4)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://github.com/theguly/exploits/blob/master/CVE-2020-10547.py Exploit, Third Party Advisory
- https://theguly.github.io/2020/09/rconfig-3.9.4-multiple-vulnerabilities/ Exploit, Third Party Advisory
- https://github.com/theguly/exploits/blob/master/CVE-2020-10547.py Exploit, Third Party Advisory
- https://theguly.github.io/2020/09/rconfig-3.9.4-multiple-vulnerabilities/ Exploit, Third Party Advisory