VYPR
Medium severity5.3NVD Advisory· Published Mar 9, 2020· Updated Jun 17, 2026

CVE-2020-10249

CVE-2020-10249

Description

BWA DiREX-Pro 1.2181 devices allow full path disclosure via an invalid name array parameter to val_soft.php3.

Affected products

2
  • BWA/DiREX-Prodescription
  • BWA/DiREX-Prollm-fuzzy
    Range: <=1.2181

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.