{"id":"CVE-2020-9526","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-9526","generatedAt":"2026-10-28T01:39:51.319Z","title":"CS2 Network P2P through 3.x, as used in millions of Internet of Things devices, suffers from an information exposure flaw that exposes user session data to supernodes in the network, as demonstrated by passively eavesdropping on user video/audio…","description":"CS2 Network P2P through 3.x, as used in millions of Internet of Things devices, suffers from an information exposure flaw that exposes user session data to supernodes in the network, as demonstrated by passively eavesdropping on user video/audio streams, capturing credentials, and compromising devices.","published":"2020-08-10T16:15:12.000Z","lastModified":"2026-06-17T03:28:06.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":5.9,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-319","CWE-327"],"affected":["cs2-network/p2p"],"epss":{"score":0.00604,"percentile":0.4862,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.60%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://hacked.camera/","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://redprocyon.com","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://hacked.camera/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://redprocyon.com","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-9526","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}