CVE-2020-10546: 
rConfig vulnerability analysis and mitigation

CVE-2020-10546 affects rConfig versions 3.9.4 and earlier, exposing an unauthenticated SQL injection vulnerability in the compliancepolicies.inc.php file. The vulnerability was discovered and disclosed in March 2020, impacting organizations using rConfig for network device configuration management (CVE Details).

The vulnerability exists due to improper sanitization of the searchColumn parameter in compliancepolicies.inc.php. The application directly incorporates user input into SQL queries without proper escaping or using prepared statements, allowing for SQL injection attacks. What makes this vulnerability particularly severe is that it can be exploited without authentication (TheGuly Blog).

The impact of this vulnerability is severe as it allows attackers to access sensitive information stored in the rConfig database, including network device credentials that are stored in cleartext by default. This access can lead to lateral movement within the network, potentially compromising all monitored network devices (CVE Details).

The vulnerability is highly exploitable with a public proof-of-concept exploit available. The attack can be executed without authentication, and the exploitation process is straightforward using standard SQL injection techniques. A Python-based exploit has been published that demonstrates the vulnerability (GitHub Exploit).

The vulnerability was addressed in rConfig version 3.9.7. Organizations using affected versions should upgrade to version 3.9.7 or later. Additionally, it's recommended to implement network segmentation and access controls to limit exposure of the rConfig interface (TheGuly Blog).