Directory traversal

2020-02-1704:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.4%

JSON

Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to messagelog.php.

CPENameOperatorVersion
syncserver_s100_firmwareeq2.90.70.3
syncserver_s200_firmwareeq1.30
syncserver_s250_firmwareeq1.25
syncserver_s300_firmwareeq2.65.0
syncserver_s350_firmwareeq2.80.1

Name	Operator	Version
syncserver_s100_firmware	eq	2.90.70.3
syncserver_s200_firmware	eq	1.30
syncserver_s250_firmware	eq	1.25
syncserver_s300_firmware	eq	2.65.0
syncserver_s350_firmware	eq	2.80.1

References

sku11army.blogspot.com/2020/01/symmetricom-syncserver.html