VULNERABILITY INTELLIGENCE
CVE-2023-41920
CVSS score9.8 CRITICAL
EPSS probability0.42%
CISA KEVNot currently listed
Published2024-07-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
The vulnerability allows attackers access to the root account without having to authenticate. Specifically, if the device is configured with the IP address of 10.10.10.10, the root user is automatically logged in.
Weakness classification
- CWE-305: Authentication Bypass by Primary Weakness