CVE-2020-15482

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The device enables an unencrypted TELNET service by default, with a blank password for the admin account. This allows an attacker to gain root access to the device over the local network.

• CWE-287
• CWE-319

• https://payatu.com/advisory/unauthenticated-telnet-service-in-niscomed-patient-monitorThird Party Advisory
• https://www.niscomed.com/multipara-monitor.htmlProduct
• https://payatu.com/advisory/unauthenticated-telnet-service-in-niscomed-patient-monitorThird Party Advisory
• https://www.niscomed.com/multipara-monitor.htmlProduct

Published

Aug 26, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15477The WebControl in RaspberryTortoise through 2012-10-28 is vu…9.8
• CVE-2020-15478The Journal theme before 3.1.0 for OpenCart allows exposure …7.5
• CVE-2020-15479An issue was discovered in PassMark BurnInTest through 9.1, …8.8
• CVE-2020-1548An information disclosure vulnerability exists when the Wind…7.8
• CVE-2020-15480An issue was discovered in PassMark BurnInTest through 9.1, …8.8
• CVE-2020-15481An issue was discovered in PassMark BurnInTest v9.1 Build 10…7.8
• CVE-2020-15483An issue was discovered on Nescomed Multipara Monitor M1000 …6.8
• CVE-2020-15484An issue was discovered on Nescomed Multipara Monitor M1000 …7.5
• CVE-2020-15485An issue was discovered on Nescomed Multipara Monitor M1000 …5.5
• CVE-2020-15486An issue was discovered on Dr Trust ECG Pen 2.00.08 devices.…6.5
• CVE-2020-15487Re:Desk 2.3 contains a blind unauthenticated SQL injection v…9.8
• CVE-2020-15488Re:Desk 2.3 allows insecure file upload.7.5