CVE-2020-19419
Emerson Smart Wireless Gateway 1420 4.6.59 Missing Authentication
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to obtain sensitive device information from the administrator console without authentication.
Un Control de Acceso Incorrecto en Emerson Smart Wireless Gateway 1420 versión 4.6.59, permite a atacantes remotos obtener información confidencial del dispositivo desde la consola del administrador sin autenticación
Emerson Smart Wireless Gateway version 1420 4.6.59 suffers from a missing authentication vulnerability.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-08-13 CVE Reserved
- 2021-03-09 CVE Published
- 2024-03-13 EPSS Updated
- 2024-08-04 CVE Updated
- 2024-08-04 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-306: Missing Authentication for Critical Function
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://cwe.mitre.org/data/definitions/306.html | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| http://packetstormsecurity.com/files/161701/Emerson-Smart-Wireless-Gateway-1420-4.6.59-Missing-Authentication.html | 2024-08-04 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Emerson Search vendor "Emerson" | Smart Wireless Gateway 1420 Firmware Search vendor "Emerson" for product "Smart Wireless Gateway 1420 Firmware" | 4.6.59 Search vendor "Emerson" for product "Smart Wireless Gateway 1420 Firmware" and version "4.6.59" | - |
Affected
| in | Emerson Search vendor "Emerson" | Smart Wireless Gateway 1420 Search vendor "Emerson" for product "Smart Wireless Gateway 1420" | - | - |
Safe
|