CVE-2020-5804

8.1 highEPSS 1.7%

High (8.1) in marvell qconvergeconslole gui. EPSS 1.7% chance of exploitation in the next 30 days.

Marvell QConvergeConsole GUI <= 5.5.0.74 is affected by a path traversal vulnerability. The deleteEventLogFile method of the GWTTestServiceImpl class lacks proper validation of a user-supplied path prior to using it in file deletion operations. An authenticated, remote attacker can leverage this vulnerability to delete arbitrary remote files as SYSTEM or root.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2021-01-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

marvell:qconvergeconslole_gui

References

https://www.tenable.com/security/research/tra-2021-01
https://www.tenable.com/security/research/tra-2021-01

Check your stack JSON