PT-2020-16956 · Netscout · Netscout Airmagnet Enterprise

Published 2020-12-03 · Updated 2021-07-21 · CVE-2020-28251

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NETSCOUT AirMagnet Enterprise versions 11.1.4 build 37257 and earlier

Description The issue allows an attacker to gain administrative access to a sensor, and subsequently, invoke a command to obtain root access to the operating system. This can be achieved by completing a straightforward password-cracking exercise, which suggests that the vulnerability can be exploited with relative ease.

Recommendations For NETSCOUT AirMagnet Enterprise versions 11.1.4 build 37257 and earlier, consider restricting access to the sensor and its associated commands to minimize the risk of exploitation until a fix is available. As a temporary workaround, limit the use of administrative credentials and ensure that all passwords are complex and not easily guessable. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-28251

Affected Products

Netscout Airmagnet Enterprise

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-28251 · Security Note
• https://osv.dev/vulnerability/CVE-2020-28251 · Vendor Advisory
• https://netscout.com/securityadvisories · Vendor Advisory
• https://netscout.com/products · Note
• https://t.me/cibsecurity/17113 · Telegram Post