Medium severity6.5NVD Advisory· Published Jan 6, 2026· Updated Jun 17, 2026
CVE-2020-36909
CVE-2020-36909
Description
SnapGear Management Console SG560 3.1.5 contains a file manipulation vulnerability that allows authenticated users to read, write, and delete files using the edit_config_files CGI script. Attackers can manipulate POST request parameters in /cgi-bin/cgix/edit_config_files to access and modify files outside the intended /etc/config/ directory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: = 3.1.5
- cpe:2.3:o:securecomputing:snapgear_sg560_firmware:3.1.5:*:*:*:*:*:*:*
- Secure Computing/SnapGear Management Console SG560v5Range: 3.1.5
Patches
Vulnerability mechanics
References
5- packetstorm.news/files/id/157939nvdExploitThird Party Advisory
- www.exploit-db.com/exploits/48556nvdExploitThird Party AdvisoryVDB Entry
- www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5568.phpnvdExploitThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/182960nvdThird Party Advisory
- www.vulncheck.com/advisories/secure-computing-snapgear-management-console-sg-arbitrary-file-readwritenvdThird Party Advisory
News mentions
0No linked articles in our index yet.