{"id":"CVE-2020-37135","state":"PUBLISHED","title":"AMSS++ 4.7 - Backdoor Admin Account","description":"AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials. Attackers can log in with the default admin username and password '1234' to gain unauthorized administrative access to the system.","publishedAt":"2026-02-06T23:14:07.110Z","updatedAt":"2026-03-05T01:28:09.704Z","severity":{"score":9.3,"label":"Critical","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["Amssplus AMSS++"],"affected":[{"vendor":"Amssplus","product":"AMSS++","versions":[{"version":"4.7","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/48114","https://www.vulncheck.com/advisories/amss-backdoor-admin-account"],"weaknesses":["CWE-798"],"ingestedAt":"2026-10-29T19:47:27.394Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/37xxx/CVE-2020-37135.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2020-37135","state":"PUBLISHED","datePublished":"2026-02-06T23:14:07.110Z","dateUpdated":"2026-03-05T01:28:09.704Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-02-03T16:27:45.307Z"},"containers":{"cna":{"title":"AMSS++ 4.7 - Backdoor Admin Account","descriptions":[{"lang":"en","value":"AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials. Attackers can log in with the default admin username and password '1234' to gain unauthorized administrative access to the system."}],"affected":[{"vendor":"Amssplus","product":"AMSS++","versions":[{"version":"4.7","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/48114","name":"ExploitDB-48114","tags":["exploit"]},{"url":"https://www.vulncheck.com/advisories/amss-backdoor-admin-account","name":"VulnCheck Advisory: AMSS++ 4.7 - Backdoor Admin Account","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":9.3,"baseSeverity":"CRITICAL","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-798","lang":"en","description":"Use of Hard-coded Credentials","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-03-05T01:28:09.704Z"},"datePublic":"2020-02-23T00:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amss\\+\\+_project:amss\\+\\+:4.7:*:*:*:*:*:*:*"}]}]}],"credits":[{"lang":"en","value":"indoushka","type":"finder"}],"x_generator":{"engine":"vulncheck"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-02-17T17:02:36.119026Z","id":"CVE-2020-37135","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-17T17:02:41.308Z"}}]}}}