CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. Exploitation may require the attacker to be authenticated.
CVE
CVE-2020-12106
Severity
CRITICAL
CVSS
9.8
EPSS
1.40%
Original NVD Description
The Web portal of the WiFi module of VPNCrypt M10 2.6.5 allows unauthenticated users to send HTTP POST request to several critical Administrative functions such as, changing credentials of the Administrator account or connect the product to a rogue access point.
Related CVEs
Other vulnerabilities affecting the same vendor(s)