CVE-2020-25011

2020-12-1703:37:49

mitre

www.cve.org

kyland kps2204

sensitive information disclosure

remote attackers

username and password

webadminget.cgi

AI Score

9.1

Confidence

High

EPSS

0.004

Percentile

73.9%

JSON

A sensitive information disclosure vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers Software Version:R0002.P05 allows remote attackers to get username and password by request /cgi-bin/webadminget.cgi script via the browser.