CVE-2020-16134

CVE-2020-16134 describes a privilege escalation vulnerability affecting various Swisscom Internet Box models (2, Standard, Plus, 3, and Light) with specific firmware versions. An attacker with local web interface credentials or physical access can create a highly privileged user on the Sysbus-API. This allows modification of SSH access, enabling superuser login. The vulnerability has a CVSS score of 8.0 (High), indicating a network-adjacent attack vector with low complexity, leading to high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.