CVE-2020-8655VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2020-8655: EyesOfNetwork Improper Privilege Management Vulnerability

Affects EyesOfNetwork EyesOfNetworkSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 60.1% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2020-8655 (opens in a new tab)

Description

EyesOfNetwork contains an improper privilege management vulnerability that allows a user to execute commands as root by leveraging a crafted Nmap Scripting Engine (NSE) script targeting nmap7. This vulnerability has been exploited in the wild and is classified as high severity.

Summary

CVE-2020-8655 is an improper privilege management vulnerability in EyesOfNetwork. It enables an attacker to run commands with root privileges by using a specially crafted NSE script with nmap7. The vulnerability has been observed in active exploitation scenarios, indicating a real-world threat. No specific affected versions or patch information is provided in the available data.

Impact

Successful exploitation grants an attacker root-level command execution on the affected system, potentially leading to full system compromise. The vulnerability has been exploited in the wild, demonstrating its practical impact and risk.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected components and monitor for suspicious NSE script usage. Avoid running untrusted NSE scripts with nmap7 in the EyesOfNetwork environment.

Weaknesses

CWE-269Improper Privilege Management (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:26:44 UTC

Weaknesses

References

Related threats