CVE-2020-9031: Path Traversal
Published Feb 17, 2020
·Updated
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to daemonlog.php.
Affected Software
20 affected components
Microchip Syncserver S100 Firmware=2.90.70.3
Microchip Syncserver S100
Microchip Syncserver S200 Firmware=1.30
Microchip Syncserver S200
Microchip Syncserver S250 Firmware=1.25
Microchip Syncserver S250
Microchip Syncserver S300 Firmware=2.65.0
Microchip Syncserver S300
Microchip Syncserver S350 Firmware=2.80.1
Microchip Syncserver S350
All of the following
Microchip Syncserver S100 Firmware=2.90.70.3
Microchip Syncserver S100
All of the following
Microchip Syncserver S200 Firmware=1.30
Microchip Syncserver S200
All of the following
Microchip Syncserver S250 Firmware=1.25
Microchip Syncserver S250
All of the following
Microchip Syncserver S300 Firmware=2.65.0
Microchip Syncserver S300
All of the following
Microchip Syncserver S350 Firmware=2.80.1
Microchip Syncserver S350
Event History
Feb 17, 2020
CVE Published
via MITRE·03:01 AM
Data Sourced
via MITRE·03:01 AM
Description
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this Symmetricom SyncServer issue?
The vulnerability ID for this issue is CVE-2020-9031.
2
What is the severity level of CVE-2020-9031?
CVE-2020-9031 has a severity level of 6.5 (medium).
3
Which devices are affected by CVE-2020-9031?
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices are affected by CVE-2020-9031.
4
What is the nature of the vulnerability in CVE-2020-9031?
CVE-2020-9031 is a Directory Traversal vulnerability.
5
How can I mitigate the CVE-2020-9031 vulnerability?
To mitigate the CVE-2020-9031 vulnerability, it is recommended to update the firmware of the affected Symmetricom SyncServer devices to a fixed version.