What’s Vulnerable › Vulnerabilities

CVE-2020-16280

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-08-20 · updated 2026-06-17
• Weakness: CWE-522

Description

Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for several external facing administrative services, domain joined users, and local administrators. To exploit the vulnerability a local attacker must have access to the underlying operating system.

Affected products

• Rangeeos: 8.0.4

References

• https://www.contextis.com/en/resources/advisories/cve-2020-16280
• https://www.contextis.com/en/resources/advisories/cve-2020-16280

Get alerted when CVE-2020-16280 or the next vulnerability affects your stack