2022-04-29 19:58:07 +00:00
id : CVE-2020-35338
info :
2022-05-17 09:18:12 +00:00
name : Wireless Multiplex Terminal Playout Server <=20.2.8 - Default Credential Detection
2022-04-29 19:58:07 +00:00
author : Jeya Seelan
severity : critical
description : Wireless Multiplex Terminal Playout Server <=20.2.8 has a default account with a password of pokon available via its web administrative interface.
2023-09-06 12:22:36 +00:00
remediation : |
Change the default credentials to strong and unique ones.
2022-04-29 19:58:07 +00:00
reference :
- https://jeyaseelans.medium.com/cve-2020-35338-9e841f48defa
- https://nvd.nist.gov/vuln/detail/CVE-2020-35338
2022-05-17 09:18:12 +00:00
- https://www.mobileviewpoint.com/
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2022-05-17 09:18:12 +00:00
cvss-score : 9.8
2021-09-10 11:26:40 +00:00
cve-id : CVE-2020-35338
cwe-id : CWE-798
2023-10-14 11:27:55 +00:00
epss-score : 0.09782
2023-10-23 12:22:20 +00:00
epss-percentile : 0.94158
2023-09-06 12:22:36 +00:00
cpe : cpe:2.3:a:mobileviewpoint:wireless_multiplex_terminal_playout_server:*:*:*:*:*:*:*:*
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : mobileviewpoint
product : wireless_multiplex_terminal_playout_server
tags : cve,cve2020,wmt,default-login
2022-04-22 10:38:41 +00:00
2023-04-27 04:28:59 +00:00
http :
2022-04-29 19:58:07 +00:00
- method : GET
path :
- "{{BaseURL}}/server/"
2023-07-11 19:49:27 +00:00
2022-04-29 19:58:07 +00:00
headers :
Authorization : "Basic OnBva29u"
matchers-condition : and
matchers :
- type : word
words :
- "<title>WMT Server playout"
2023-07-11 19:49:27 +00:00
- type : status
status :
- 200
2023-10-23 12:51:13 +00:00
# digest: 490a004630440220742073f7bcb64ef06eb2b40f95e664085df6b2d5091f3ed041a1769076857ba802200d02cffedb91a9156505e048a10b9ab15ea9b41bb56e0b7d7ddedb8cedb058b1:922c64590222798bb761d5b6d8e72950