S4E just found a high-severity finding from top 10 tcp port service scan
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
critical·Product Based Web Vulnerabilities·Updated Dec 16, 2023

CVE-2020-35338 Scanner

Detects 'Default Credentials' vulnerability in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server affects v. 20.2.8 and earlier.

Est. Time~15 seconds
Scan TypeSingle Scan
Targetsurl
CostFree
2.4k
Times Used
continuous scan runs
4.7k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2020-35338
9.8
CVSS

The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlier has a default account with a password of "pokon."

Attack Vector
-
Privileges Req.
-
User Interaction
-
Affected
n/aby n/a
n/a
Updated Aug 21, 2026View on NVD →
Detail

The Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server is a platform used for managing the streaming and broadcasting of video content. It is a vital tool for media organizations that wish to deliver high-quality video content to their audiences in real-time. The server allows them to interact with different kinds of network devices that are involved in the production and delivery of video content. It also enables users to remotely configure and manage key functionalities related to broadcasting.

Recently, a serious vulnerability was detected in the WMT Playout Server, which is identified as CVE-2020-35338. The flaw is related to the default account that is present in the Web Administrative Interface. This account has a static and weak password that can easily be exploited by cybercriminals. Anyone who has access to the default account can gain unrestricted access to the server and all its functionalities. This represents a significant threat to media organizations, as it can have severe consequences if the system is compromised.

If the CVE-2020-35338 vulnerability is successfully exploited, the attacker can gain full control of the WMT Playout Server. This means they can manipulate, damage or destroy critical video content, causing significant losses to the organization. Attackers can also use the compromised server to launch further attacks against other systems or networks. Moreover, attackers can collect sensitive information, such as login credentials, financial data, and client information that can be used for malicious purposes, such as identity theft or financial fraud.

In conclusion, it is crucial for media organizations to secure their digital assets from potential cyberattacks. The CVE-2020-35338 vulnerability is just one of many examples of how attacks can compromise systems and cause significant damage. By using advanced security platforms such as s4e.io, individuals and organizations can keep themselves informed about the latest vulnerabilities and security threats. These tools provide real-time updates, analysis and insights that can be used to protect digital assets effectively.

 

REFERENCES

Solution Advice

To protect against potential attacks that exploit the vulnerability, users need to take several precautions. These include the following:

  • Change the default password of the Web Administrative Interface account immediately.
  • Implement password policies that require complex and frequently updated passwords.
  • Monitor login attempts and user activities regularly.
  • Install the latest security updates and patches for the WMT Playout Server.
  • Restrict access to the Web Administrative Interface only to authorized personnel.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.