Default credentials

2020-02-1704:15:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

JSON

Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow stored XSS via the newUserName parameter on the “User Creation, Deletion and Password Maintenance” screen (when creating a new user).

CPENameOperatorVersion
syncserver_s100_firmwareeq2.90.70.3
syncserver_s200_firmwareeq1.30
syncserver_s250_firmwareeq1.25
syncserver_s300_firmwareeq2.65.0
syncserver_s350_firmwareeq2.80.1

Name	Operator	Version
syncserver_s100_firmware	eq	2.90.70.3
syncserver_s200_firmware	eq	1.30
syncserver_s250_firmware	eq	1.25
syncserver_s300_firmware	eq	2.65.0
syncserver_s350_firmware	eq	2.80.1

References

sku11army.blogspot.com/2020/01/symmetricom-syncserver_95.html