CVE-2020-23036

Published: Oct 22, 2021Modified: Jun 17, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

MEDIA NAVI Inc SMACom v1.2 was discovered to contain an insecure session validation vulnerability in the session handling of the `password` authentication parameter of the wifi photo transfer module. This vulnerability allows attackers with network access privileges or on public wifi networks to read the authentication credentials and follow-up requests containing the user password via a man in the middle attack.

Affected (1)

Products: Medianavi: Smacom

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Medianavi Smacom	Version 1.2

Related CWEs

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (4)

https://cwe.mitre.org/data/definitions/522.html

Source: cve@mitre.org

Technical Description

https://www.vulnerability-lab.com/get_content.php?id=2211

Source: cve@mitre.org

ExploitThird Party Advisory

https://cwe.mitre.org/data/definitions/522.html

Source: af854a3a-2127-422b-91ae-364da2661108

Technical Description

https://www.vulnerability-lab.com/get_content.php?id=2211

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.