Is CVE-2020-11625 actively exploited?

No active exploitation of CVE-2020-11625 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2020-11625 be exploited remotely?

Yes. CVE-2020-11625 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2020-11625?

CVE-2020-11625 has a CVSS score of 5.3 (MEDIUM).

HOME VULNERABILITIESCVE-2020-11625

MEDIUM

CVE-2020-11625

CWE-203Published: July 23, 2020· Updated: Jun 17, 2026

5.3

CVSS v3.1

Official Description

An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. Failed web UI login attempts elicit different responses depending on whether a user account exists. Because the responses indicate whether a submitted username is valid or not, they make it easier to identify legitimate usernames. If a login request is sent to ISAPI/Security/sessionLogin/capabilities using a username that exists, it will return the value of the salt given to that username, even if the password is incorrect. However, if a login request is sent using a username that is not present in the database, it will return an empty salt value. This allows attackers to enumerate legitimate usernames, facilitating brute-force attacks. NOTE: this is different from CVE-2020-7057.

NVD Source

Technical Analysis

CVE-2020-11625 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.