CVE-2020-15062

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-319 CWE-522

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://research.hisolutions.com/2020/05/critical-vulnerabilites-in-multiple-usb-network-servers/Broken Link, Third Party Advisory
https://research.hisolutions.com/2020/05/critical-vulnerabilites-in-multiple-usb-network-servers/Broken Link, Third Party Advisory

Timeline

Published: Aug 7, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-150638.8DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to bypass authentication via a web CVE-2020-150644.3DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to conduct persistent XSS attacks CVE-2020-150656.5DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to denial-of-service the device vi CVE-2020-150699.8Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientles CVE-2020-15077.9<p>An elevation of privilege vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who succe CVE-2020-150708.8Zulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write directly to the postgres database, and chose CVE-2020-150716.1content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields['name'] to appendSubheading.CVE-2020-150728.8An issue was discovered in phpList through 3.5.4. An error-based SQL Injection vulnerability exists via the Import Administrators section.CVE-2020-150735.4An issue was discovered in phpList through 3.5.4. An XSS vulnerability occurs within the Import Administrators section via upload of an edit CVE-2020-150747.5OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens CVE-2020-150757.1OpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical files it should not have access via symlinks in /tmp CVE-2020-150767.8Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical files it should not have access via symlinks