{"id":"CVE-2020-8657","kind":"vulnerability","aliases":["CVE-2020-8657"],"related":[],"title":"EyesOfNetwork EyesOfNetwork: EyesOfNetwork Use of Hard-Coded Credentials Vulnerability","description":"An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all installations, hence allowing an attacker to calculate/guess the admin access token.","summary":"EyesOfNetwork, a network monitoring product, ships with the same default API key on every install. An attacker who knows or can guess that key can derive the admin access token and act as an administrator.","severity":"critical","cvss":9.8,"epss":0.91874,"exploited":true,"exploited_at":"2021-11-03T00:00:00+00:00","products":[{"name":"EyesOfNetwork EyesOfNetwork","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","eyesofnetwork","network-monitoring","package","self-hosted"],"not_affected_if":["default-config-changed"],"how_to_check":null,"fix":"Apply the vendor update per CISA guidance; change the default API key on every install. Vendor instructions not in sources.","status":"open","published_at":"2020-02-06T18:15:13+00:00","first_seen_at":"2026-10-23T19:11:53+00:00","triaged_at":"2026-10-23T21:33:40+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-23T21:33:40Z","model":"claude-haiku-5-5","output":{"fix":"Apply the vendor update per CISA guidance; change the default API key on every install. Vendor instructions not in sources.","reach":"network","impact":"high","summary":"EyesOfNetwork, a network monitoring product, ships with the same default API key on every install. An attacker who knows or can guess that key can derive the admin access token and act as an administrator.","category":"package","who_cares":["eyesofnetwork","self-hosted","network-monitoring"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker obtains admin access token and takes administrative control of the monitoring server.","analyst_note":"Find the vendor advisory and the patched version or the setting that replaces the default API key; the sources list no affected or fixed versions.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["default-config-changed"],"user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.00045,"input_tokens":2868,"output_tokens":327,"severity_before":"unknown"},"analyst_status":"queued","analyst_note":"Find the vendor advisory and the patched version or the setting that replaces the default API key; the sources list no affected or fixed versions.","search":"'-2020':12A,15A '-8657':13A,16A '2.4.2':86C '5.3':69C 'access':56B,100C 'act':59B 'admin':55B,99C 'administr':62B 'allow':93C 'api':38B,75C,84C 'attack':44B,95C 'calculate/guess':97C 'code':8A 'credenti':9A 'cve':11A,14A 'default':37B,88C 'deriv':53B 'discov':66C 'eonapi':79C 'everi':41B 'exploit':19B 'eyesofnetwork':1A,2A,3A,17A,18A,20B,28B,68C 'guess':49B 'hard':7A 'hard-cod':6A 'hardcod':77C 'henc':92C 'host':27B 'include/api_functions.php':82C 'instal':42B,71C,91C 'issu':64C 'key':39B,51B,76C,80C 'know':46B 'monitor':23B,31B 'network':22B,30B 'network-monitor':21B 'packag':24B 'product':32B 'self':26B 'self-host':25B 'ship':33B 'token':57B,101C 'use':4A,72C 'version':85C 'vulner':10A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2020-02-06T18:15:13+00:00","kev":{"dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2020-8657","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8657","severity":null,"published_at":"2021-11-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:53+00:00","fetched_at":"2026-10-25T11:39:18+00:00","note":null},{"source":"epss","external_id":"CVE-2020-8657","url":"https://api.first.org/data/v1/epss?cve=CVE-2020-8657","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2020-8657","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8657","severity":null,"published_at":"2020-02-06T18:15:13+00:00","modified_at":"2026-06-17T03:26:43+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}