NetSight
medium6.5

CVE-2020-9033

Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to authl…

Impact

Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to authlog.php.

Affected products

VendorProductAffected versions
MicrochipSyncserver S100 Firmware
Version 2.90.70.3
MicrochipSyncserver S200 Firmware
Version 1.30
MicrochipSyncserver S250 Firmware
Version 1.25
MicrochipSyncserver S300 Firmware
Version 2.65.0
MicrochipSyncserver S350 Firmware
Version 2.80.1

Weakness classification

References