1. Home
  2. CVE Database
  3. CVE-2020-10206
MEDIUM · 4.4

CVE-2020-10206

Use of a Hard-coded Password in VNCserver in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows local attackers to view and interact wi...

Vulnerability Description

Use of a Hard-coded Password in VNCserver in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows local attackers to view and interact with the video output of the device.

CVSS Score

4.4

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
AminoAk45X Firmware-
AminoAk45X-
AminoAk5Xx Firmware-
AminoAk5Xx-
AminoAk65X Firmware-
AminoAk65X-
AminoAria6Xx Firmware-
AminoAria6Xx-
AminoAria7Xx Firmware-
AminoAria7Xx-
AminoKami7B Firmware-
AminoKami7B-

Related Weaknesses (CWE)

CWE-798

References

FAQ

What is CVE-2020-10206?

CVE-2020-10206 is a vulnerability with a CVSS score of 4.4 (MEDIUM). Use of a Hard-coded Password in VNCserver in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows local attackers to view and interact wi...

How severe is CVE-2020-10206?

CVE-2020-10206 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-10206?

Check the references section above for vendor advisories and patch information. Affected products include: Amino Ak45X Firmware, Amino Ak45X, Amino Ak5Xx Firmware, Amino Ak5Xx, Amino Ak65X Firmware.