CVE-2020-14510
GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unprivileged attacker to execute commands as root.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS probability
- 0.47%
- CWE
- CWE-193
- Published
- 2020-08-25
- Last modified
- 2026-03-14
Affected products
- Secomea GateManager
Weakness type
Related vulnerabilities
- CVE-2023-44444 — GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability
- CVE-2026-79148 — Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social enginee
- CVE-2024-10442 — Off-by-one error vulnerability in the transmission component in Synology Replication Service before 1.0.12-0066, 1.2.2-0
- CVE-2021-21938 — A heap-based buffer overflow vulnerability exists in the Palette box parser functionality of Accusoft ImageGear 19.10. A
- CVE-2023-30546 — Contiki-NG has off-by-one error in Antelope DBMS
- CVE-2020-10062 — Packet length decoding error in MQTT
- CVE-2024-51554 — off-by-one-error
- CVE-2026-65927 — Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control