CVE-2020-14011 | BDVDB-2026-137385 Detail

Description#

Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin account, unless "Built-in admin" is manually unchecked. This allows command execution via the Add New Package and Scheduled Deployments features.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.lansweeper.com/knowledgebase/restricting-access-to-the-web-console/
https://pastebin.com/EUkMx94X
http://packetstormsecurity.com/files/158205/Lansweeper-7.2-Default-Account-Remote-Code-Execution.html

Exploit#

No public exploit known

History#

Version 12020-06-15Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.