Vulnerability Details CVE-2020-9526
CS2 Network P2P through 3.x, as used in millions of Internet of Things devices, suffers from an information exposure flaw that exposes user session data to supernodes in the network, as demonstrated by passively eavesdropping on user video/audio streams, capturing credentials, and compromising devices.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 36.1%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 4.3
References
Products affected by CVE-2020-9526
-
cpe:2.3:a:cs2-network:p2p:2.2.4.0
-
cpe:2.3:a:cs2-network:p2p:2.2.4.0a
-
cpe:2.3:a:cs2-network:p2p:3.0.3
-
cpe:2.3:a:cs2-network:p2p:3.0.3a