CVE-2020-14944

PoC ×2—

CVSS 3.1

9.8 critical

EPSS

6%p93

Published

Jun 22, 2020 (Jun 22, 2020)

Modified

Jun 17, 2026

Description

Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can allow for manipulation and takeover of user accounts if successfully exploited. The following vulnerable functions are exposed: ChangePassword, SaveUserProfile, and GetUser.

Vendors: globalradar
Products: bsa radar
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (6.3%)

In the news0 stories

No ingested article mentions this CVE yet.