CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NCVE-2020-9030
Medium (6.5) in microchip. EPSS 1.1% chance of exploitation in the next 30 days.
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to the syslog.php.
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- microchip:syncserver_s100_firmware
- microchip:syncserver_s200_firmware
- microchip:syncserver_s250_firmware
- microchip:syncserver_s300_firmware
- microchip:syncserver_s350_firmware