CVE-2020-9023

Affected product: Iteris Vantage Velocity Field Unit, firmware versions 2.3.1 and 2.4.2. Vulnerability: two undocumented accounts configured with weak credentials (bluetooth:bluetooth; eclipse:eclipse); the Bluetooth account is stated as the root password. Implication: configuration weakness that...