Vulnerability Details CVE-2020-26097
The firmware of the PLANET Technology Corp NVR-915 and NVR-1615 before 2020-10-28 embeds default credentials for root access via telnet. By exposing telnet on the Internet, remote root access on the device is possible. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 56.5%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
Products affected by CVE-2020-26097
-
cpe:2.3:h:planet:nvr-1615:-
-
cpe:2.3:h:planet:nvr-915:-
-
cpe:2.3:o:planet:nvr-1615_firmware:-
-
cpe:2.3:o:planet:nvr-915_firmware:-