CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NCVE-2020-9029
Medium (6.5) in microchip. EPSS 1.2% chance of exploitation in the next 30 days.
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to messagelog.php.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- microchip:syncserver_s100_firmware
- microchip:syncserver_s200_firmware
- microchip:syncserver_s250_firmware
- microchip:syncserver_s300_firmware
- microchip:syncserver_s350_firmware