CVE-2020-25846

7.4 highEPSS 1.0%

High (7.4) in panorama project nhiservisignadapter. EPSS 1.0% chance of exploitation in the next 30 days.

The digest generation function of NHIServiSignAdapter has not been verified for source file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential.

Severity

CVSS 3.1

7.4 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2020-12-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

panorama_project:nhiservisignadapter

References

https://www.twcert.org.tw/tw/cp-132-4274-7bd65-1.html
https://www.twcert.org.tw/tw/cp-132-4274-7bd65-1.html

Check your stack JSON