Actively exploited in the wild

EyesOfNetwork Use of Hard-Coded Credentials Vulnerability

EyesOfNetwork - EyesOfNetwork · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2020-8657

CriticalCVSS 9.8KEV

Published: 06/02/2020(UTC)Updated: 17/06/2026(UTC)Translated: 18/09/2026(UTC)NVD NIST

Summary

An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all installations, hence allowing an attacker to calculate/guess the admin access token.

Risk Assessment

An attacker can gain administrator privileges, taking control of the EyesOfNetwork system and potentially the entire monitoring environment.

Recommendation

Change the default API key to a unique one for each installation and update EyesOfNetwork to a version that does not use a hardcoded key.

Other vulnerabilities in EyesOfNetwork

CVE-2020-8655HighActively exploited
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS