What’s Vulnerable › Vulnerabilities

CVE-2020-37135: AMSS++ 4.7 - Backdoor Admin Account

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-07 · updated 2026-06-17
• Weakness: CWE-798

Description

AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials. Attackers can log in with the default admin username and password '1234' to gain unauthorized administrative access to the system.

Affected products

• Amssplus AMSS++: 4.7

References

• https://www.exploit-db.com/exploits/48114
• https://www.vulncheck.com/advisories/amss-backdoor-admin-account

Get alerted when CVE-2020-37135 or the next vulnerability affects your stack