Input validation

2020-02-1703:15:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.3%

JSON

Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices mishandle session validation, leading to unauthenticated creation, modification, or elimination of users.

CPENameOperatorVersion
syncserver_s100_firmwareeq2.90.70.3
syncserver_s200_firmwareeq1.30
syncserver_s250_firmwareeq1.25
syncserver_s300_firmwareeq2.65.0
syncserver_s350_firmwareeq2.80.1

Name	Operator	Version
syncserver_s100_firmware	eq	2.90.70.3
syncserver_s200_firmware	eq	1.30
syncserver_s250_firmware	eq	1.25
syncserver_s300_firmware	eq	2.65.0
syncserver_s350_firmware	eq	2.80.1

References

sku11army.blogspot.com/2020/01/symmetricom-syncserver_27.html