CVE-2020-8964

CVE-2020-8964 affects TimeTools devices (SC7105/SC9205/SC9705/SR7110/SR9210/SR9750/SR9850/T100/T300/T550). Root cause: authentication bypass via a hardcoded cookie placed in t3.cgi (t3axs=TiMEtOOlsj7G3xMm52wB). Impact: remote attacker could bypass authentication with network access, aligning with...

CVE-2020-8964: Use of Hard-coded Credentials

TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300 1.0.003, and T550 1.0.003 devices allow remote attackers to bypass authentication by placing t3axs=TiMEtOOlsj7G3xMm52wB in a t3.cgi request, aka a "hardcode...