High severity7.5NVD Advisory· Published Feb 17, 2020· Updated Jun 17, 2026
CVE-2020-9034
CVE-2020-9034
Description
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices mishandle session validation, leading to unauthenticated creation, modification, or elimination of users.
Affected products
7- Symmetricom/SyncServer S100description
- Range: = 2.90.70.3
- cpe:2.3:o:microchip:syncserver_s100_firmware:2.90.70.3:*:*:*:*:*:*:*
- cpe:2.3:o:microchip:syncserver_s200_firmware:1.30:*:*:*:*:*:*:*
- cpe:2.3:o:microchip:syncserver_s250_firmware:1.25:*:*:*:*:*:*:*
- cpe:2.3:o:microchip:syncserver_s300_firmware:2.65.0:*:*:*:*:*:*:*
- cpe:2.3:o:microchip:syncserver_s350_firmware:2.80.1:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- sku11army.blogspot.com/2020/01/symmetricom-syncserver_27.htmlnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.