CVE-2020-10605

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Grundfos CIM 500 before v06.16.00 responds to unauthenticated requests for password storage files.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Jul 17, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-106067.8In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software. CVE-2020-106078.8In Advantech WebAccess, Versions 8.4.2 and prior. A stack-based buffer overflow vulnerability caused by a lack of proper validation of the lCVE-2020-106087.8In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI SyCVE-2020-106097.5Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system seCVE-2020-10617.5A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles objects in memory. The vulnerability couldCVE-2020-106107.8In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PICVE-2020-106119.8Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary codCVE-2020-106129.1Opto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent communicates with SoftPACMonitor over network Port 22000. However, this port is CVE-2020-106137.5Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to disclose sensitive inCVE-2020-106144.8In OSIsoft PI System multiple products and versions, an authenticated remote attacker with write access to PI Vision databases could inject CVE-2020-106157.5Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers cause a denial-of-servicCVE-2020-106168.8Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. Therefore, an attacker can
CVE-2020-10605: High severity, CVSS 7.5 | Vulnix