CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NCVE-2020-9033
Medium (6.5) in microchip. EPSS 1.3% chance of exploitation in the next 30 days.
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to authlog.php.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- microchip:syncserver_s100_firmware
- microchip:syncserver_s200_firmware
- microchip:syncserver_s250_firmware
- microchip:syncserver_s300_firmware
- microchip:syncserver_s350_firmware