CVE-2020-8995

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-12-21 · updated 2026-06-17
Weakness: CWE-798

Description

Programi Bilanc Build 007 Release 014 31.01.2020 supplies a .exe file containing several hardcoded credentials to different servers that allow remote attackers to gain access to the complete infrastructure including the website, update server, and external issue tracking tools.

Affected products

Bilanc: through 014_31.01.2020

References

http://seclists.org/fulldisclosure/2020/Dec/38
https://packetstormsecurity.com/files/160626/Programi-Bilanc-Build-007-Release-014-31.01.2020-Hardcoded-Credentials.html
http://seclists.org/fulldisclosure/2020/Dec/38
https://packetstormsecurity.com/files/160626/Programi-Bilanc-Build-007-Release-014-31.01.2020-Hardcoded-Credentials.html

Get alerted when CVE-2020-8995 or the next vulnerability affects your stack