NetSight
medium6.5

CVE-2020-9031

Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to daemo…

Impact

Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to daemonlog.php.

Affected products

VendorProductAffected versions
MicrochipSyncserver S100 Firmware
Version 2.90.70.3
MicrochipSyncserver S200 Firmware
Version 1.30
MicrochipSyncserver S250 Firmware
Version 1.25
MicrochipSyncserver S300 Firmware
Version 2.65.0
MicrochipSyncserver S350 Firmware
Version 2.80.1

Weakness classification

References