medium6.5
CVE-2020-15809
spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal.
Impact
spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Spinetix | Dsos | through 4.5.2-1.0.2-1eb2ffbd |
| Spinetix | Hmp350 Firmware | through 4.5.2-1.0.36229 |
| Spinetix | Hmp300 Firmware | through 4.5.2-1.0.36229 |
| Spinetix | Diva Firmware | through 4.5.2-1.0.36229 |
| Spinetix | Hmp400 Firmware | through 4.5.2-1.0.2-1eb2ffbd |
| Spinetix | Hmp400w Firmware | through 4.5.2-1.0.2-1eb2ffbd |