by Kastro
Paper/Archive/CVE-2020-7548

CVE-2020-7548

schneider — A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (see security noti…

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 73.8.738 × 2014.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information) that could allow unauthorized users to login.

Affected

ProductAffectedFixed inSource
Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information)Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information)–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refse.com/ww/en/download/document/SEVD-2020-287-03