High severity7.5NVD Advisory· Published Jan 13, 2021· Updated Jun 17, 2026

CVE-2020-5686

Description

Incorrect implementation of authentication algorithm issue in UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to access the remote system maintenance feature and obtain the information by sending a specially crafted request to a specific URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

NEC/Univerge Sv8500 Firmware
cpe:2.3:o:nec:univerge_sv8500_firmware:*:*:*:*:*:*:*:*
Range: >=s6,<=s8
NEC/Univerge Sv9500 Firmware
cpe:2.3:o:nec:univerge_sv9500_firmware:*:*:*:*:*:*:*:*
Range: >=v1,<=v7
NEC/UNIVERGE SV9500 seriesllm-create2 versions
V1 to V7+ 1 more
- (no CPE)range: V1 to V7
- (no CPE)range: SV9500 series from V1 to V7and SV8500 series from S6 to S8

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN38784555/index.htmlnvdThird Party Advisory
www.necplatforms.co.jp/en/press/security_adv.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000