CVE-2020-7030
CWE-522Published: June 4, 2020· Updated: Jun 17, 2026
Official Description
A sensitive information disclosure vulnerability was discovered in the web interface component of IP Office that may potentially allow a local user to gain unauthorized access to the component. Affected versions of IP Office include: 9.x, 10.0 through 10.1.0.7 and 11.0 though 11.0.4.3.
Technical Analysis
CVE-2020-7030 requires local access, meaning attackers must already have a foothold on the target system.
Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.
A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 5.5.
A proof-of-concept (PoC) exploit exists for CVE-2020-7030. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.
CVSS v3.1 Vector Breakdown
Affected Vendors & Products
Exploit & PoC Resources
Official Patches & Advisories
All References (6)
Quick Facts
Related CVEs (CWE-522)
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2020-7030 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts