CVE-2020-25988

CVE-2020-25988 describes a credential exposure vulnerability in the Genexis Platinum 4410 Router V2.1 (P4410-V2–1.34H). The router's UPNP service, listening on port 5555, has an action 'X_GetAccess' that leaks administrator credentials. This vulnerability has a CVSS score of 6.5 (Medium) and can be exploited by an attacker on the same network segment without requiring authentication or user interaction, leading to high confidentiality impact. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, and there is some community discussion surrounding it. There is no indication of active exploitation.