CVE-2020-24551

6.1 mediumEPSS 0.6%

Medium (6.1) in iproom mmc\+. EPSS 0.6% chance of exploitation in the next 30 days.

IProom MMC+ Server login page does not validate specific parameters properly. Attackers can use the vulnerability to redirect to any malicious site and steal the victim's login credentials.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2020-10-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

iproom:mmc\+

References

https://www.twcert.org.tw/tw/cp-132-4053-6e9a2-1.html
https://www.twcert.org.tw/tw/cp-132-4053-6e9a2-1.html

Check your stack JSON