NetSight
medium6.5

CVE-2020-9030

Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to the s…

Impact

Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to the syslog.php.

Affected products

VendorProductAffected versions
MicrochipSyncserver S100 Firmware
Version 2.90.70.3
MicrochipSyncserver S200 Firmware
Version 1.30
MicrochipSyncserver S250 Firmware
Version 1.25
MicrochipSyncserver S300 Firmware
Version 2.65.0
MicrochipSyncserver S350 Firmware
Version 2.80.1

Weakness classification

References