VULNERABILITY INTELLIGENCE
CVE-2020-16280
CVSS score5.5 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2020-08-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for several external facing administrative services, domain joined users, and local administrators. To exploit the vulnerability a local attacker must have access to the underlying operating system.
Weakness classification
- nvd@nist.gov: CWE-522
Primary references
- cve@mitre.org — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory