CVE-2020-14930

An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-reset feature discloses the verification token. Upon a getverificationcode.jsp request, this token is transmitted not only to the registered phone number of the user account, but is also transmitted to the unauthenticated HTTP client.

• CWE-319
• CWE-522

• https://www.exploit-db.com/exploits/48196Exploit, Third Party Advisory, VDB Entry
• https://www.pentest.com.tr/exploits/CTROMS-Terminal-OS-Port-Portal-Password-Reset-Authentication-Bypass.htmlExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/48196Exploit, Third Party Advisory, VDB Entry
• https://www.pentest.com.tr/exploits/CTROMS-Terminal-OS-Port-Portal-Password-Reset-Authentication-Bypass.htmlExploit, Third Party Advisory

Published

Jun 19, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1492A memory corruption vulnerability exists when Windows Media …7.8
• CVE-2020-14926CMS Made Simple 2.2.14 allows XSS via a Search Term to the a…5.4
• CVE-2020-14927Navigate CMS 2.9 allows XSS via the Alias or Real URL field …4.8
• CVE-2020-14928evolution-data-server (eds) through 3.36.3 has a STARTTLS bu…5.9
• CVE-2020-14929Alpine before 2.23 silently proceeds to use an insecure conn…7.5
• CVE-2020-1493An information disclosure vulnerability exists when attachin…5.5
• CVE-2020-14931A stack-based buffer overflow in DMitry (Deepmagic Informati…9.8
• CVE-2020-14932compose.php in SquirrelMail 1.4.22 calls unserialize for the…9.8
• CVE-2020-14933compose.php in SquirrelMail 1.4.22 calls unserialize for the…8.8
• CVE-2020-14934Buffer overflows were discovered in Contiki-NG 4.4 through 4…9.8
• CVE-2020-14935Buffer overflows were discovered in Contiki-NG 4.4 through 4…9.8
• CVE-2020-14936Buffer overflows were discovered in Contiki-NG 4.4 through 4…9.8