PT-2020-19912 · Intellian · Intellian Aptus

Published 2020-01-27 · Updated 2020-01-30 · CVE-2020-8001

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intellian Aptus application version 1.0.2

Description The issue concerns a hardcoded password in the masteruser FTP account, with the password being intellian. This hardcoded password could potentially allow unauthorized access.

Recommendations For Intellian Aptus application version 1.0.2, consider changing the hardcoded password intellian for the masteruser FTP account to a secure, unique password to prevent unauthorized access. As a temporary workaround, restrict access to the FTP account until a secure password can be implemented.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2020-8001

Affected Products

Intellian Aptus

References · 4

• 🔥 https://sku11army.blogspot.com/2020/01/intellian-multiple-vulnerabilities-in.html · Exploit
• https://osv.dev/vulnerability/CVE-2020-8001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8001 · Security Note
• https://t.me/cvenotify/426 · Telegram Post