PatchTheCVECVE-2020-35338: The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 a
CVE-2020-35338 is a critical-severity flaw (CVSS 9.8) affecting wireless multiplex terminal playout server. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlier has a default account with a password of "pokon."
Why this priority
- Critical severity
- EPSS top 4%: very likely to be exploited
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 9.8 (Critical) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 11.5% (top 4%) |
| CISA exploited list | No |
| Weakness | CWE-798 |
| Published | 2020-12-14 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Nuclei scan template: Wireless Multiplex Terminal Playout Server <=20.2.8 - Default Credential Detection
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2020-35338?
wireless multiplex terminal playout server: upgrade to newer than 20.2.8. Exact commands for each OS are on this page.
Is CVE-2020-35338 being exploited?
CVE-2020-35338 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2020-35338 affect?
CVE-2020-35338 affects wireless multiplex terminal playout server. Severity is critical (CVSS 9.8). The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlier has a default account with a password of "pokon."
How urgent is CVE-2020-35338?
Priority 68/100. Critical severity; EPSS top 4%: very likely to be exploited; Public exploit reference; Remotely exploitable, no login, no user action