CVE-2020-11918

An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. When a backup file is created through the web interface, information on all users, including passwords, can be found in cleartext in the backup file. An attacker capable of accessing the web interface can create the backup file.

• CWE-312

• https://seclists.org/fulldisclosure/2024/Jul/14Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2024/Jul/14

Published

Nov 7, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11912The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-boun…5.3
• CVE-2020-11913The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bo…5.3
• CVE-2020-11914The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bou…4.3
• CVE-2020-11915An issue was discovered in Svakom Siime Eye 14.1.00000001.3.…6.8
• CVE-2020-11916An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0…6.3
• CVE-2020-11917An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0…4.3
• CVE-2020-11919An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0…8
• CVE-2020-1192A remote code execution vulnerability exists in Visual Studi…7.8
• CVE-2020-11920An issue was discovered in Svakom Siime Eye 14.1.00000001.3.…9.8
• CVE-2020-11921An issue was discovered in Lush 2 through 2020-02-25. Due to…8.8
• CVE-2020-11922An issue was discovered in WiZ Colors A60 1.14.0. The device…4.3
• CVE-2020-11923An issue was discovered in WiZ Colors A60 1.14.0. API creden…5.5