CVE-2020-7233
CRITICALKmccontrols Bac-a1616bc Firmware - Insufficiently Protected Credentials
Title source: ruleDescription
KMS Controls BAC-A1616BC BACnet devices have a cleartext password of snowman in the BACKDOOR_NAME variable in the BC_Logon.swf file.
Scores
CVSS v3
9.8
EPSS
0.0039
EPSS Percentile
59.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-522
Status
published
Affected Products (1)
kmccontrols/bac-a1616bc_firmware
Timeline
Published
Jan 19, 2020
Tracked Since
Feb 18, 2026