CVE-2020-15482

EUVD-2020-7475 · Published Aug 26, 2020

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The device enables an unencrypted TELNET service by default, with a blank password for the admin account. This allows an attacker to gain root access to the device over the local network.

Technologies

Niscomed M1000 Multipara Patient Monitor FirmwareNiscomed M1000 Multipara Patient Monitor

Weaknesses

CWE-287CWE-319

CVSS scores

v3.17.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
v2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation Credential Access Discovery Collection

T1068Exploitation for Privilege Escalation T1040Network Sniffing T1056.004Credential API Hooking

References

https://payatu.com/advisory/unauthenticated-telnet-service-in-niscomed-patient-monitor
https://www.niscomed.com/multipara-monitor.html

Potentially impacted assets

See if this affects your attack surface