CVE-2020-9030 - Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to the syslog.php

Back Back to CVE browser

MEDIUM

Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to the syslog.php

Published Feb 17, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 1.06%

Description

Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to the syslog.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29860
Advisory
https://sku11army.blogspot.com/2020/01/symmetricom-syncserver.html
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29860		Advisory
https://sku11army.blogspot.com/2020/01/symmetricom-syncserver.html		x_refsource_MISCExploitThird Party Advisory