MEDIA NAVI Inc SMACom v1.2 was discovered to contain an insecure session validation vulnerability in the session handling of the `password` authentication parameter of the wifi photo transfer module. This vulnerability allows attackers with network access privileges or on public wifi networks to read the authentication credentials and follow-up requests containing the user password via a man in the middle attack.
References
| Link | Resource |
|---|---|
| https://cwe.mitre.org/data/definitions/522.html | Technical Description |
| https://www.vulnerability-lab.com/get_content.php?id=2211 | Exploit Third Party Advisory |
Configurations
History
05 Nov 2022, 02:05
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://cwe.mitre.org/data/definitions/522.html - Technical Description |
10 Jul 2022, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
28 Oct 2021, 13:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.vulnerability-lab.com/get_content.php?id=2211 - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 5.9 |
| CWE | CWE-522 | |
| CPE | cpe:2.3:a:medianavi:smacom:1.2:*:*:*:*:iphone_os:*:* |
22 Oct 2021, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-10-22 20:15
Updated : 2024-02-04 22:08
NVD link : CVE-2020-23036
Mitre link : CVE-2020-23036
CVE.ORG link : CVE-2020-23036
JSON object : View
Products Affected
medianavi
- smacom
CWE
CWE-522
Insufficiently Protected Credentials