CVE-2020-9023: Iteris Vantage Velocity Firmware

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have two users that are not documented and are configured with weak passwords (User bluetooth, password bluetooth; User eclipse, password eclipse). Also, bluetooth is the root password.

Affected products

• Iteris Vantage Velocity Firmware: version 2.3.1 only; version 2.4.2 only

Published 2020-02-17. Last modified 2026-06-17.