{"vulnerability": "cve-2020-2889", "sightings": [{"uuid": "118759ef-2bc4-43d0-8bb4-0d80b6641714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28895", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-02", "content": "", "creation_timestamp": "2025-06-05T10:00:00.000000Z"}, {"uuid": "371d7a9d-d1ed-4bd2-ab60-9277d592707d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28899", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m56dsv7znt2n", "content": "", "creation_timestamp": "2025-11-09T05:11:16.813291Z"}, {"uuid": "0d8b2680-8171-4fe3-9442-a22f1790fa4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28895", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-252-09", "content": "", "creation_timestamp": "2025-09-09T10:00:00.000000Z"}, {"uuid": "6f025d4f-ba0d-458e-9c50-50ecef818bfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28895", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lygjaehkrt27", "content": "", "creation_timestamp": "2025-09-09T20:03:37.347380Z"}, {"uuid": "6bbef907-f88b-4b59-a436-74ceb2a6bac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28899", "type": "seen", "source": "https://t.me/cibsecurity/24965", "content": "\u203c CVE-2020-28899 \u203c\n\nThe Web CGI Script on ZyXEL LTE4506-M606 V1.00(ABDO.2)C0 devices does not require authentication, which allows remote unauthenticated attackers (via crafted JSON action data to /cgi-bin/gui.cgi) to use all features provided by the router. Examples: change the router password, retrieve the Wi-Fi passphrase, send an SMS message, or modify the IP forwarding to access the internal network.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-16T19:30:02.000000Z"}, {"uuid": "990a06bf-c65f-43e7-b101-21bca176ee59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28896", "type": "seen", "source": "https://t.me/cibsecurity/16737", "content": "\u203c CVE-2020-28896 \u203c\n\nMutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials being exposed on an unencrypted connection, or to a machine-in-the-middle.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-23T22:46:06.000000Z"}]}