AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-16098

CRITICAL · CVSS 9.8 EPSS 1.09%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-09-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2020-16098
Severity
CRITICAL
CVSS
9.8
EPSS
1.09%

Original NVD Description

It is possible to enumerate access card credentials via an unauthenticated network connection to the server in versions of Command Centre v8.20 prior to v8.20.1166(MR3), versions of 8.10 prior to v8.10.1211(MR5), versions of 8.00 prior to v8.00.1228(MR6), all versions of 7.90 and earlier. These credentials can then be used to encode low security cards to be used by the system where insecure card technologies are supported.