CVE-2020-37135

HIGH

7.5

Description

AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials. Attackers can log in with the default admin username and password '1234' to gain unauthorized administrative access to the system.

Details CVE

Score CVSS v3.17.5

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie2/7/2026

Derniere modification2/9/2026

Sourcenvd

Observations honeypot0

Faiblesses (CWE)

CWE-798

References

https://www.exploit-db.com/exploits/48114(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/amss-backdoor-admin-account(disclosure@vulncheck.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.