cve.bz

CVE-2020-9023

9.8 criticalEPSS 1.5%

Critical (9.8) in iteris vantage velocity firmware. EPSS 1.5% chance of exploitation in the next 30 days.

Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have two users that are not documented and are configured with weak passwords (User bluetooth, password bluetooth; User eclipse, password eclipse). Also, bluetooth is the root password.

Severity

CVSS 3.1

9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE
CWE-521
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON