CVE-2020-5684

MEDIUM · CVSS 4.8 EPSS 0.33%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-12-24 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-5684

Severity

MEDIUM

CVSS

4.8

EPSS

0.33%

Original NVD Description

iSM client versions from V5.1 prior to V12.1 running on NEC Storage Manager or NEC Storage Manager Express does not verify a server certificate properly, which allows a man-in-the-middle attacker to eavesdrop on an encrypted communication or alter the communication via a crafted certificate.