1. Home
  2. CVE Database
  3. CVE-2020-10288
CRITICAL · 9.8

CVE-2020-10288

IRC5 exposes an ftp server (port 21). Upon attempting to gain access you are challenged with a request of username and password, however you can input whatever you like. As long as the field isn't emp...

Vulnerability Description

IRC5 exposes an ftp server (port 21). Upon attempting to gain access you are challenged with a request of username and password, however you can input whatever you like. As long as the field isn't empty it will be accepted.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AbbRobotware5.09
AbbIrb140-
AbbIrc5-
WindriverVxworks5.5.1

Related Weaknesses (CWE)

CWE-287CWE-284

References

FAQ

What is CVE-2020-10288?

CVE-2020-10288 is a vulnerability with a CVSS score of 9.8 (CRITICAL). IRC5 exposes an ftp server (port 21). Upon attempting to gain access you are challenged with a request of username and password, however you can input whatever you like. As long as the field isn't emp...

How severe is CVE-2020-10288?

CVE-2020-10288 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2020-10288?

Check the references section above for vendor advisories and patch information. Affected products include: Abb Robotware, Abb Irb140, Abb Irc5, Windriver Vxworks.