CVE-2020-12493 describes a critical vulnerability in SWARCO's CPU LS4000 Series firmware (versions starting with G4...), where an open debugging port grants root access without authentication. This allows an unauthenticated attacker on the network to gain full control of the device. With a CVSS score of 10.0, this vulnerability is easily exploitable over the network with no user interaction, leading to complete compromise of confidentiality, integrity, and availability, potentially disrupting connected operations. While there is no known active exploitation or public exploit code, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the security community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
g4CPE matchmatch criteria | cpe:2.3:o:swarco:cpu_ls4000_firmware:g4:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.