CVE-2020-25620

An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accounts named support@n-able.com and nableadmin@n-able.com. These allow logins to the N-Central Administrative Console (NAC) and/or the regular web interface.

• CWE-798

• https://ernw.de/en/publications.htmlThird Party Advisory
• https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/Third Party Advisory
• https://support.solarwinds.com/SuccessCenter/s/Vendor Advisory
• https://ernw.de/en/publications.htmlThird Party Advisory
• https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/Third Party Advisory
• https://support.solarwinds.com/SuccessCenter/s/Vendor Advisory

Published

Dec 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25613An issue was discovered in Ruby through 2.5.8, 2.6.x through…7.5
• CVE-2020-25614xmlquery before 1.3.1 lacks a check for whether a LoadURL re…9.8
• CVE-2020-25617An issue was discovered in SolarWinds N-Central 12.3.0.670. …8.8
• CVE-2020-25618An issue was discovered in SolarWinds N-Central 12.3.0.670. …8.8
• CVE-2020-25619An issue was discovered in SolarWinds N-Central 12.3.0.670. …4.4
• CVE-2020-2562Vulnerability in the Primavera Portfolio Management product …6.1
• CVE-2020-25621An issue was discovered in SolarWinds N-Central 12.3.0.670. …8.4
• CVE-2020-25622An issue was discovered in SolarWinds N-Central 12.3.0.670. …8.8
• CVE-2020-25623Erlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allow…7.5
• CVE-2020-25624hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer ove…5
• CVE-2020-25625hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a …5.3
• CVE-2020-25626A flaw was found in Django REST Framework versions before 3.…6.1