CVE-2020-28993

7.5 highEPSS 2.8%

High (7.5) in atx minicmts200a firmware. EPSS 2.8% chance of exploitation in the next 30 days.

A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. Successful exploitation of this vulnerability would allow an unauthenticated attacker to retrieve administrator credentials by sending a malicious POST request.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2020-12-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

atx:minicmts200a_firmware

References

https://atx.com/products/commercial-services-gateways/minicmts200a-broadband-gateway/
https://www.exploit-db.com/exploits/49124
https://atx.com/products/commercial-services-gateways/minicmts200a-broadband-gateway/
https://www.exploit-db.com/exploits/49124

Check your stack JSON