CVE-2020-10549

CRITICAL NUCLEI

rconfig < 3.9.4 - Unauthenticated SQL Injection via snippets.inc.php

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2020-10549 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices.

Nuclei Templates (1)

rConfig <=3.9.4 - SQL Injection
CRITICALby madrobot
Shodan: http.title:"rconfig"
FOFA: title="rconfig"

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://theguly.github.io/2020/09/rconfig-3.9.4-multiple-vulnerabilities/

Scores

CVSS v3 9.8
EPSS 0.3616
EPSS Percentile 98.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
rconfig/rconfig < 3.9.4
Published Jun 04, 2020
Tracked Since Feb 18, 2026