CVE-2020-35338 describes a critical vulnerability in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server versions 20.2.8 and earlier, where the web administrative interface uses a default account with the password "pokon." This flaw carries a CVSS score of 9.8 (Critical) due to its network-based attack vector, low complexity, and complete compromise potential (confidentiality, integrity, and availability). While not currently listed on the KEV catalog or Hot List, and with no public Metasploit or ExploitDB modules, Nuclei templates exist for detection, indicating a potential for exploitation. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 20.2.8CPE matchmatch criteria | cpe:2.3:a:mobileviewpoint:wireless_multiplex_terminal_playout_server:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.