EUVD-2020-17690

Malware in sbrugna...

CVE-2020-24990

An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version...

CVE-2020-24990: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version...

PT-2020-15879

Name of the Vulnerable Software and Affected Versions QSC Q-SYS Core Manager version 8.2.1 QSC Q-SYS Core Manager versions prior to 8.2.1 Description An issue was discovered in QSC Q-SYS Core Manager. A remote attacker can perform a directory traversal via the TFTP service running on UDP port 69...