CVE-2019-20462

MEDIUM EPSS 21.8%

Published Nov 7, 20241y ago · Modified Jun 17, 20262w ago

5.3 CVSS 3.1

Medium

Published Nov 7, 2024 1y ago

Last Modified Jun 17, 2026 2w ago

Description

An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device comes with a serial interface at the board level. By attaching to this serial interface and rebooting the device, a large amount of information is disclosed. This includes the view password and the password of the Wi-Fi access point that the device used.

CVSS Details

Base Score

5.3

Exploitability

0.9

Impact

4.0

Vector string

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Attack Vector Physical

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Changed

Confidentiality High

Integrity None

Availability None

Threat Intelligence

EPSS Exploit Probability

21.8% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-284

References 3

seclists.org http://seclists.org/fulldisclosure/2024/Jul/14
seclists.org https://seclists.org/fulldisclosure/2024/Jul/14
alecto.nl https://www.alecto.nl

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.