CVE-2020-29577

CRITICAL

znc <1.7.1-slim - Privilege Escalation

Title source: llm
STIX 2.1

Description

The official znc docker images before 1.7.1-slim contain a blank password for a root user. Systems using the znc docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password.

References (1)

Core 1

Scores

CVSS v3 9.8
EPSS 0.0207
EPSS Percentile 84.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (11)
znc/znc_docker_image 1.6
znc/znc_docker_image 1.6-slim
znc/znc_docker_image 1.6.4
znc/znc_docker_image 1.6.4-slim
znc/znc_docker_image 1.6.5
znc/znc_docker_image 1.6.5-slim
znc/znc_docker_image 1.6.6
znc/znc_docker_image 1.6.6-slim
znc/znc_docker_image 1.7.0
znc/znc_docker_image 1.7.0-slim
... and 1 more
Published Dec 08, 2020
Tracked Since Feb 18, 2026