How severe is CVE-2020-8573?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 6.5 out of 10.

What type of vulnerability is CVE-2020-8573?

This is classified as CWE-798, which is a common weakness in software security.

CVE-2020-8573 - MEDIUM Severity | CVSS 6.5

Vulnerability Description

The NetApp HCI H610C, H615C and H610S Baseboard Management Controllers (BMC) are shipped with a documented default account and password that should be changed during the initial node setup. During upgrades to Element 11.8 and 12.0 or the Compute Firmware Bundle 12.2.92 the BMC account password on the H610C, H615C and H610S platforms is reset to the default documented value which could allow remote attackers to cause a Denial of Service (DoS).

Related Vulnerabilities

CVE-2019-10851

MEDIUM

CVSS:6.5(Medium)

Computrols CBAS 18.0.0 has hard-coded encryption keys.

CWE-7982019

CVE-2019-11946

MEDIUM

CVSS:6.5(Medium)

A remote credential disclosure vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

CWE-7982019

CVE-2019-6693

MEDIUM

CVSS:6.5(Medium)

Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to decipher the sensitive data, via knowledge o...

CWE-7982019

CVE-2020-27181

MEDIUM

CVSS:6.5(Medium)

A hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020.015 allows attackers to craft password-reset tokens or decrypt server-side configuration files.

CWE-7982020

CVE-2021-20537

MEDIUM

CVSS:6.5(Medium)

IBM Security Verify Access Docker 10.0.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external ...

CWE-7982021

CVE-2021-32459

MEDIUM

CVSS:6.5(Medium)

Trend Micro Home Network Security version 6.6.604 and earlier contains a hard-coded password vulnerability in the log collection server which could allow an attacker to use a specially crafted network...

CWE-7982021