CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2020-15809
Medium (6.5) in spinetix. EPSS 1.0% chance of exploitation in the next 30 days.
spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-22, CWE-918
- Published
- Modified
- Record from
- the NVD, synced
Affected
- spinetix:diva_firmware
- spinetix:dsos
- spinetix:hmp300_firmware
- spinetix:hmp350_firmware
- spinetix:hmp400_firmware
- spinetix:hmp400w_firmware