What’s Vulnerable › Vulnerabilities

CVE-2020-23036

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-10-22 · updated 2026-06-17
• Weakness: CWE-522

Description

MEDIA NAVI Inc SMACom v1.2 was discovered to contain an insecure session validation vulnerability in the session handling of the `password` authentication parameter of the wifi photo transfer module. This vulnerability allows attackers with network access privileges or on public wifi networks to read the authentication credentials and follow-up requests containing the user password via a man in the middle attack.

Affected products

• Medianavi Smacom: 1.2

References

• https://cwe.mitre.org/data/definitions/522.html
• https://www.vulnerability-lab.com/get_content.php?id=2211
• https://cwe.mitre.org/data/definitions/522.html
• https://www.vulnerability-lab.com/get_content.php?id=2211

Get alerted when CVE-2020-23036 or the next vulnerability affects your stack