{"schema_version":"1","data":[{"id":3552,"advisory_id":"19efcbaa-f147-4e17-b36a-faef87868ab1","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8655","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:28.370734+00:00","extraction_method":"structured","technologies":["core-kev","eyesofnetwork"],"cve_ids":["CVE-2020-8655"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"EyesOfNetwork Improper Privilege Management Vulnerability","summary":"EyesOfNetwork contains an improper privilege management vulnerability that may allow a user to run commands as root via a crafted Nmap Scripting Engine (NSE) script to nmap7. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-8655","products":[{"name":{"value":"EyesOfNetwork","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-8655","aliases":["CVE-2020-8655"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-269"],"cveID":"CVE-2020-8655","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-8655","dueDate":"2022-05-03","product":"EyesOfNetwork","dateAdded":"2021-11-03","vendorProject":"EyesOfNetwork","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"EyesOfNetwork contains an improper privilege management vulnerability that may allow a user to run commands as root via a crafted Nmap Scripting Engine (NSE) script to nmap7.","vulnerabilityName":"EyesOfNetwork Improper Privilege Management Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-8655","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3550,"advisory_id":"c310e330-162d-44bf-ac32-ceb9ff835485","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8657","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:26.802333+00:00","extraction_method":"structured","technologies":["core-kev","eyesofnetwork"],"cve_ids":["CVE-2020-8657"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"EyesOfNetwork Use of Hard-Coded Credentials Vulnerability","summary":"EyesOfNetwork contains a use of hard-coded credentials vulnerability, as it uses the same API key by default. Exploitation allows an attacker to calculate or guess the admin access token. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-8657","products":[{"name":{"value":"EyesOfNetwork","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-8657","aliases":["CVE-2020-8657"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-798"],"cveID":"CVE-2020-8657","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-8657","dueDate":"2022-05-03","product":"EyesOfNetwork","dateAdded":"2021-11-03","vendorProject":"EyesOfNetwork","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"EyesOfNetwork contains a use of hard-coded credentials vulnerability, as it uses the same API key by default. Exploitation allows an attacker to calculate or guess the admin access token.","vulnerabilityName":"EyesOfNetwork Use of Hard-Coded Credentials Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-8657","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3552,"next_before":3550}