Security Advisory
CVE-2020-10549
9.8
CRITICAL
Vulnerability Description
rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices.
Published Date
June 4, 2020
Official Source
NIST NVD Advisory