CVE-2020-5686

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-01-13 · updated 2026-06-17
Weakness: CWE-287

Description

Incorrect implementation of authentication algorithm issue in UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to access the remote system maintenance feature and obtain the information by sending a specially crafted request to a specific URL.

Affected products

NEC Univerge Sv8500 Firmware: from s6 through s8
NEC Univerge Sv9500 Firmware: from v1 through v7

References

https://jvn.jp/en/jp/JVN38784555/index.html
https://www.necplatforms.co.jp/en/press/security_adv.html
https://jvn.jp/en/jp/JVN38784555/index.html
https://www.necplatforms.co.jp/en/press/security_adv.html

Get alerted when CVE-2020-5686 or the next vulnerability affects your stack