PT-2026-6818 · Amss++ · Amss++

Indoushka · Publicado 2026-02-06 · Atualizado 2026-02-07 · CVE-2020-37135

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AMSS++ version 4.7

Description AMSS++ 4.7 has a flaw that permits unauthorized access to administrative accounts. This is due to the use of hardcoded credentials, specifically the default username 'admin' and password '1234'. Successful exploitation allows attackers to gain administrative privileges on the system.

Recommendations Change the default administrative credentials immediately.

Exploit

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2020-37135

Produtos afetados

Amss++

Referências · 4

• 🔥 https://exploit-db.com/exploits/48114 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37135 · Nota de Segurança
• https://vulncheck.com/advisories/amss-backdoor-admin-account · Nota
• https://t.me/CVEtracker/43981 · Publicação no Telegram