CVE-2020-5686: Nec Univerge SV8500 Firmware

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Incorrect implementation of authentication algorithm issue in UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to access the remote system maintenance feature and obtain the information by sending a specially crafted request to a specific URL.

Affected products

• Nec Univerge SV8500 Firmware: from s6, up to and including s8
• Nec Univerge SV9500 Firmware: from v1, up to and including v7

Published 2021-01-13. Last modified 2026-06-17.