CVE-2020-37135
AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials. Attackers can log in with the default admin username and password '1234' to gain unauthorized administrative access to the system.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.3
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.02%
- CWE
- CWE-798
- Published
- 2026-02-06
- Last modified
- 2026-03-14
Affected products
- Amssplus AMSS++
Weakness type
Related vulnerabilities
- CVE-2026-22769 — Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. Thi
- CVE-2026-27507 — Binardat 10G08-0800GSM Network Switch Hard-coded Credentials
- CVE-2026-25803 — 3DP-MANAGER Uses Hard-coded Credentials
- CVE-2026-24448 — Use of hard-coded credentials issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker to obtain administr
- CVE-2026-23647 — Glory RBG-100 Recycler System Hard-coded OS Credentials
- CVE-2025-9497 — Hardcoded Upgrade Decryption Passwords
- CVE-2020-37092 — Netis E1+ 1.2.32533 - Backdoor Account (root)
- CVE-2019-25322 — Heatmiser Netmonitor 3.03 - Hardcoded Credentials