CVE-2020-21995

Inim Electronics Smartliving SmartLAN/G/SI <=6.x uses default hardcoded credentials. An attacker could exploit this to gain Telnet, SSH and FTP access to the system.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-04-29

Last modified

2024-08-04

Weaknesses

CWE-798

Affected products

• Smartliving 10100l Firmware (Inim)
• Smartliving 10100lg3 Firmware (Inim)
• Smartliving 1050 Firmware (Inim)
• Smartliving 1050g3 Firmware (Inim)
• Smartliving 505 Firmware (Inim)
• Smartliving 515 Firmware (Inim)

References

• https://www.exploit-db.com/exploits/47763
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5546.php