Vulnerabilities > CVE-2020-14011 - Insecure Default Initialization of Resource vulnerability in Lansweeper

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

lansweeper

CWE-1188

critical

NVD

Published: 2020-06-15

Updated: 2022-04-26

Summary

Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin account, unless "Built-in admin" is manually unchecked. This allows command execution via the Add New Package and Scheduled Deployments features.

Vulnerable Configurations

Part	Description	Count
Application	Lansweeper Lansweeper Lansweeper 6.0.0.19 Lansweeper Lansweeper 6.0.0.22 Lansweeper Lansweeper 6.0.0.42 Lansweeper Lansweeper 6.0.0.45 Lansweeper Lansweeper 6.0.0.48 Lansweeper Lansweeper 6.0.0.51 Lansweeper Lansweeper 6.0.0.63 Lansweeper Lansweeper 6.0.0.64 Lansweeper Lansweeper 6.0.0.65 Lansweeper Lansweeper 6.0.0.6517 Lansweeper Lansweeper 6.0.100.12 Lansweeper Lansweeper 6.0.100.21 Lansweeper Lansweeper 6.0.100.29 Lansweeper Lansweeper 6.0.100.67 Lansweeper Lansweeper 6.0.100.75 Lansweeper Lansweeper 6.0.100.87 Lansweeper Lansweeper 6.0.100.94 Lansweeper Lansweeper 6.0.100.98 Lansweeper Lansweeper 6.0.110.98 Lansweeper Lansweeper 6.0.110.104 Lansweeper Lansweeper 6.0.130.40 Lansweeper Lansweeper 6.0.130.48 Lansweeper Lansweeper 6.0.130.62 Lansweeper Lansweeper 6.0.150.50 Lansweeper Lansweeper 6.0.150.60 Lansweeper Lansweeper 6.0.151.26 Lansweeper Lansweeper 6.0.151.32 Lansweeper Lansweeper 6.0.151.34 Lansweeper Lansweeper 6.0.230.45 Lansweeper Lansweeper 6.0.230.46 Lansweeper Lansweeper 6.0.230.48 Lansweeper Lansweeper 6.0.230.49 Lansweeper Lansweeper 7.0.30.61 Lansweeper Lansweeper 7.0.30.64 Lansweeper Lansweeper 7.0.30.66 Lansweeper Lansweeper 7.0.100.5 Lansweeper Lansweeper 7.0.110.2 Lansweeper Lansweeper 7.0.151.4 Lansweeper Lansweeper 7.1.40.5 Lansweeper Lansweeper 7.1.40.6 Lansweeper Lansweeper 7.1.50.1 Lansweeper Lansweeper 7.1.100.12 Lansweeper Lansweeper 7.1.100.16 Lansweeper Lansweeper 7.1.110.5 Lansweeper Lansweeper 7.1.110.6 Lansweeper Lansweeper 7.1.110.7 Lansweeper Lansweeper 7.1.115.3 Lansweeper Lansweeper 7.1.115.4 Lansweeper Lansweeper 7.1.117.4 Lansweeper Lansweeper 7.1.118.10 Lansweeper Lansweeper 7.2.100.20 Lansweeper Lansweeper 7.2.100.23 Lansweeper Lansweeper 7.2.100.28 Lansweeper Lansweeper 7.2.100.31 Lansweeper Lansweeper 7.2.100.33 Lansweeper Lansweeper 7.2.105.2 Lansweeper Lansweeper 7.2.106.26 Lansweeper Lansweeper 7.2.106.35 Lansweeper Lansweeper 7.2.106.48 Lansweeper Lansweeper 7.2.107.4 Lansweeper Lansweeper 7.2.108.6	61

Common Weakness Enumeration (CWE)

CWE-1188 - Insecure Default Initialization of Resource

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References