PT-2019-9034 · Invoxia · Invoxia Nvx220

Published 2019-07-05 · Updated 2019-07-15 · CVE-2018-14528

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Invoxia NVX220 (affected versions not specified)

Description The issue allows for TELNET access with a default password for the admin account.

Recommendations For Invoxia NVX220, change the default admin password to a strong and unique password as soon as possible to prevent unauthorized access.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2018-14528

Affected Products

Invoxia Nvx220

References · 3

• 🔥 https://gitlab.com/r3dlight/CVE-2018-14528 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-14528 · Security Note
• https://t.me/cvenotify/260 · Telegram Post