Lucene search

CVE-2020-6857

🗓️ 21 Jan 2020 16:49:29Reported by mitreType

CarbonFTP v1.4 uses insecure proprietary password encryption with hard-coded weak key

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2020-6857	21 Jan 202017:15	–	cve
Prion	Hardcoded credentials	21 Jan 202017:15	–	prion
Exploit DB	NEOWISE CARBONFTP 1.4 - Weak Password Encryption	21 Jan 202000:00	–	exploitdb
Exploit DB	Neowise CarbonFTP 1.4 - Insecure Proprietary Password Encryption	21 Apr 202000:00	–	exploitdb
Packet Storm	Neowise CarbonFTP 1.4 Insecure Proprietary Password Encryption	21 Apr 202000:00	–	packetstorm
Packet Storm	Neowise CarbonFTP 1.4 Insecure Proprietary Password Encryption	20 Jan 202000:00	–	packetstorm
exploitpack	NEOWISE CARBONFTP 1.4 - Weak Password Encryption	21 Jan 202000:00	–	exploitpack
0day.today	Neowise CarbonFTP 1.4 Insecure Proprietary Password Encryption Exploit	21 Jan 202000:00	–	zdt
0day.today	Neowise CarbonFTP 1.4 - Insecure Proprietary Password Encryption Exploit	21 Apr 202000:00	–	zdt
NVD	CVE-2020-6857	21 Jan 202017:15	–	nvd

Source	Link
seclists	www.seclists.org/fulldisclosure/2020/Jan/29
packetstormsecurity	www.packetstormsecurity.com/files/157321/Neowise-CarbonFTP-1.4-Insecure-Proprietary-Password-Encryption.html
packetstormsecurity	www.packetstormsecurity.com/files/156015/Neowise-CarbonFTP-1.4-Insecure-Proprietary-Password-Encryption.html
seclists	www.seclists.org/bugtraq/2020/Jan/30
hyp3rlinx	www.hyp3rlinx.altervista.org/
seclists	www.seclists.org/fulldisclosure/2020/Jan/35

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Jan 2020 16:29Current

5.5Medium risk

Vulners AI Score5.5

EPSS0.001