CVE-2020-8995

—

CVSS 3.1

9.8 critical

EPSS

2%p81

Published

Dec 21, 2020 (Dec 21, 2020)

Modified

Jun 17, 2026

Description

Programi Bilanc Build 007 Release 014 31.01.2020 supplies a .exe file containing several hardcoded credentials to different servers that allow remote attackers to gain access to the complete infrastructure including the website, update server, and external issue tracking tools.

Vendors: bilanc
Products: bilanc
Weakness: CWE-798
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.