CVE-2020-7521

2020-08-3116:10:12

CWE-22

schneider

www.cve.org

9.4 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.1%

JSON

Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software (V2.0 and earlier) when accessing a vulnerable method of FileUploadServlet which may lead to uploading executable files to non-specified directories.

CNA Affected

[
  {
    "product": "SFAPV9601 - APC Easy UPS On-Line Software V2.0 and earlier",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "SFAPV9601 - APC Easy UPS On-Line Software V2.0 and earlier"
      }
    ]
  }
]

References

www.se.com/ww/en/download/document/SEVD-2020-224-04/