Medium severity6.5NVD Advisory· Published Feb 17, 2020· Updated Jun 17, 2026
CVE-2020-9029
CVE-2020-9029
Description
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to messagelog.php.
Affected products
7- Symmetricom/SyncServer S100description
- Range: 2.90.70.3
- cpe:2.3:o:microchip:syncserver_s100_firmware:2.90.70.3:*:*:*:*:*:*:*
- cpe:2.3:o:microchip:syncserver_s200_firmware:1.30:*:*:*:*:*:*:*
- cpe:2.3:o:microchip:syncserver_s250_firmware:1.25:*:*:*:*:*:*:*
- cpe:2.3:o:microchip:syncserver_s300_firmware:2.65.0:*:*:*:*:*:*:*
- cpe:2.3:o:microchip:syncserver_s350_firmware:2.80.1:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- sku11army.blogspot.com/2020/01/symmetricom-syncserver.htmlnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.