CVE-2020-10546

CVE-2020-10546 is a critical unauthenticated SQL injection vulnerability affecting rConfig 3.9.4 and earlier versions, specifically within the compliancepolicies.inc.php component. This flaw allows an unauthenticated attacker to execute arbitrary SQL queries, leading to full compromise of the rConfig system. Given that rConfig stores device passwords in cleartext by default, successful exploitation enables lateral movement to monitored network devices, posing a severe risk of widespread network compromise. The vulnerability has a CVSS score of 9.8 (Critical) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a Nuclei template exists for detection, indicating readily available exploit code, though there is no evidence of active exploitation or significant community discussion.