CVE-2020-7801 Information disclosure in n/a

Medium 5.3 Published 14 Apr 2020 Updated 4 Aug 2024

An attacker can expose sensitive information via the SNMP protocol on the HUSKY RTU 6049-E70, requiring a firmware upgrade to mitigate.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-7801?

CVE-2020-7801 is a medium-severity vulnerability in n/a, published on 14 Apr 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) vulnerability. The affected product is vulnerable to information exposure over the SNMP protocol. This is a different issue than CVE-2019-16879, CVE-2019-20045, CVE-2019-20046, CVE-2020-7800, and CVE-2020-7802.

Weakness: CWE-200

Which versions are affected by CVE-2020-7801?

It affects 1 product.

Products include Mysyngeryss Husky Rtu 6049-E70 Firmware.

How do I fix CVE-2020-7801?

No fix has been published for CVE-2020-7801 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-7801 being exploited?

There is no known exploitation of CVE-2020-7801 in the wild and no public exploit code.

Sources

Also known as GHSA-hwh8-6rw9-7v6w.