CVE-2020-12447

7.5 highEPSS 14%

High (7.5) in onkyo tx-nr585 firmware. EPSS 14% chance of exploitation in the next 30 days.

A Local File Inclusion (LFI) issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to read sensitive files via %2e%2e%2f directory traversal, as demonstrated by reading /etc/shadow.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2020-04-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

onkyo:tx-nr585_firmware

References

https://blog.spookysec.net/onkyo-lfi/
https://blog.spookysec.net/onkyo-lfi/

Check your stack JSON