VULNERABILITY INTELLIGENCE

CVE-2020-5723

CVSS score9.8 CRITICAL
EPSS probability5.89%
CISA KEVNot currently listed
Published2020-03-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an attacker to retrieve all passwords and possibly gain elevated privileges.

Weakness classification

  • vulnreport@tenable.com: CWE-312
  • nvd@nist.gov: CWE-312

Primary references