Vulnerabilities > Lindy International > High

DATE CVE VULNERABILITY TITLE RISK
2020-08-07 CVE-2020-15059 Improper Authentication vulnerability in Lindy-International 42633 Firmware 2.078.000
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter.
low complexity
lindy-international CWE-287
8.8
2020-08-07 CVE-2020-15058 Insufficiently Protected Credentials vulnerability in Lindy-International 42633 Firmware 2.078.000
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.
low complexity
lindy-international CWE-522
8.8