VULNERABILITY INTELLIGENCE

CVE-2020-9526

CVSS score5.9 MEDIUM
EPSS probability0.60%
CISA KEVNot currently listed
Published2020-08-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

CS2 Network P2P through 3.x, as used in millions of Internet of Things devices, suffers from an information exposure flaw that exposes user session data to supernodes in the network, as demonstrated by passively eavesdropping on user video/audio streams, capturing credentials, and compromising devices.

Weakness classification

  • CWE-319: Cleartext Transmission of Sensitive Information
  • CWE-327: Use of a Broken or Risky Cryptographic Algorithm

Primary references