PT-2026-6818 · Amss++ · Amss++

Indoushka · CVE-2020-37135 · Published 2026-02-06 · Updated 2026-02-07

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AMSS++ version 4.7

Description AMSS++ 4.7 has a flaw that permits unauthorized access to administrative accounts. This is due to the use of hardcoded credentials, specifically the default username 'admin' and password '1234'. Successful exploitation allows attackers to gain administrative privileges on the system.

Recommendations Change the default administrative credentials immediately.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2020-37135

Affected Products

Amss++

References · 4

• 🔥 https://exploit-db.com/exploits/48114 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37135 · Security Note
• https://vulncheck.com/advisories/amss-backdoor-admin-account · Note
• https://t.me/CVEtracker/43981 · Telegram Post