Vulnerabilities > CVE-2020-14011 - Insecure Default Initialization of Resource vulnerability in Lansweeper

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

lansweeper

CWE-1188

NVD

Published: 2020-06-15

Updated: 2022-04-26

Summary

Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin account, unless "Built-in admin" is manually unchecked. This allows command execution via the Add New Package and Scheduled Deployments features.

Vulnerable Configurations

Part	Description	Count
Application	Lansweeper Lansweeper Lansweeper 6.0.0.19 Lansweeper Lansweeper 6.0.0.22 Lansweeper Lansweeper 6.0.0.42 Lansweeper Lansweeper 6.0.0.45 Lansweeper Lansweeper 6.0.0.48 Lansweeper Lansweeper 6.0.0.51 Lansweeper Lansweeper 6.0.0.63 Lansweeper Lansweeper 6.0.0.64 Lansweeper Lansweeper 6.0.0.65 Lansweeper Lansweeper 6.0.0.6517 Lansweeper Lansweeper 6.0.100.12 Lansweeper Lansweeper 6.0.100.21 Lansweeper Lansweeper 6.0.100.29 Lansweeper Lansweeper 6.0.100.67 Lansweeper Lansweeper 6.0.100.75 Lansweeper Lansweeper 6.0.100.87 Lansweeper Lansweeper 6.0.100.94 Lansweeper Lansweeper 6.0.100.98 Lansweeper Lansweeper 6.0.110.98 Lansweeper Lansweeper 6.0.110.104 Lansweeper Lansweeper 6.0.130.40 Lansweeper Lansweeper 6.0.130.48 Lansweeper Lansweeper 6.0.130.62 Lansweeper Lansweeper 6.0.150.50 Lansweeper Lansweeper 6.0.150.60 Lansweeper Lansweeper 6.0.151.26 Lansweeper Lansweeper 6.0.151.32 Lansweeper Lansweeper 6.0.151.34 Lansweeper Lansweeper 6.0.230.45 Lansweeper Lansweeper 6.0.230.46 Lansweeper Lansweeper 6.0.230.48 Lansweeper Lansweeper 6.0.230.49 Lansweeper Lansweeper 7.0.30.61 Lansweeper Lansweeper 7.0.30.64 Lansweeper Lansweeper 7.0.30.66 Lansweeper Lansweeper 7.0.100.5 Lansweeper Lansweeper 7.0.110.2 Lansweeper Lansweeper 7.0.151.4 Lansweeper Lansweeper 7.1.40.5 Lansweeper Lansweeper 7.1.40.6 Lansweeper Lansweeper 7.1.50.1 Lansweeper Lansweeper 7.1.100.12 Lansweeper Lansweeper 7.1.100.16 Lansweeper Lansweeper 7.1.110.5 Lansweeper Lansweeper 7.1.110.6 Lansweeper Lansweeper 7.1.110.7 Lansweeper Lansweeper 7.1.115.3 Lansweeper Lansweeper 7.1.115.4 Lansweeper Lansweeper 7.1.117.4 Lansweeper Lansweeper 7.1.118.10 Lansweeper Lansweeper 7.2.100.20 Lansweeper Lansweeper 7.2.100.23 Lansweeper Lansweeper 7.2.100.28 Lansweeper Lansweeper 7.2.100.31 Lansweeper Lansweeper 7.2.100.33 Lansweeper Lansweeper 7.2.105.2 Lansweeper Lansweeper 7.2.106.26 Lansweeper Lansweeper 7.2.106.35 Lansweeper Lansweeper 7.2.106.48 Lansweeper Lansweeper 7.2.107.4 Lansweeper Lansweeper 7.2.108.6	61

Common Weakness Enumeration (CWE)

CWE-1188 - Insecure Default Initialization of Resource

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References