PT-2020-16430 · Airleader · Airleader Easy+1

Published 2020-11-16 · Updated 2020-11-30 · CVE-2020-26509

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Airleader Master and Easy versions prior to 6.22

Description The issue concerns default credentials in Airleader Master and Easy devices that can be exploited for a denial of service.

Recommendations For versions prior to 6.22, change the default credentials to prevent unauthorized access and potential denial of service attacks.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2020-26509

Affected Products

Airleader Easy

Airleader Master

References · 4

• 🔥 https://syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-033.txt · Exploit
• https://osv.dev/vulnerability/CVE-2020-26509 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26509 · Security Note
• https://t.me/cibsecurity/16399 · Telegram Post