CVE-2020-37135: Amssplus Amss++

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials. Attackers can log in with the default admin username and password '1234' to gain unauthorized administrative access to the system.

Affected products

• Amssplus Amss++: version 4.7 only

Published 2026-02-07. Last modified 2026-06-17.