ACTIVELY EXPLOITED
CVE-2020-8657: EyesOfNetwork Use of Hard-Coded Credentials Vulnerability
| Vendor | EyesOfNetwork |
|---|---|
| Product | EyesOfNetwork |
| Actively exploited | Yes |
| Added to CISA KEV | 3 Nov 2021 |
| CISA federal deadline | 3 May 2022 |
| Weakness (CWE) | CWE-798 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
EyesOfNetwork contains a use of hard-coded credentials vulnerability, as it uses the same API key by default. Exploitation allows an attacker to calculate or guess the admin access token.
SOURCES
Other EyesOfNetwork flaws
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.