CVE-2020-21995

moderate-risk
Published 2021-04-29

Inim Electronics Smartliving SmartLAN/G/SI <=6.x uses default hardcoded credentials. An attacker could exploit this to gain Telnet, SSH and FTP access to the system.

Do I need to act?

-
0.66% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (6)

Smartliving 505 Firmware
Smartliving 515 Firmware
Smartliving 1050 Firmware
Smartliving 1050G3 Firmware
Smartliving 10100L Firmware
Smartliving 10100Lg3 Firmware

Affected Vendors

Inim

References (4)

Third Party Advisory https://www.exploit-db.com/exploits/47763
Third Party Advisory https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5546.php
Third Party Advisory https://www.exploit-db.com/exploits/47763
Third Party Advisory https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5546.php
47
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 2/34 · Minimal
Exposure 13/34 · Low