Login Request a demo
SS
Product
Syncserver S300 Firmware
by Microchip · last CVE Feb 17, 2020
7
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 1Medium 6Low 0
Severity
All severities7Critical0High1Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Syncserver S300 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-9033
6.5
1%
Feb 17
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to authlog.php
Affected: 2.65.0
CVE-2020-9032
6.5
1%
Feb 17
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to kernlog.php
Affected: 2.65.0
CVE-2020-9031
6.5
1%
Feb 17
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to daemonlog.php
Affected: 2.65.0
CVE-2020-9030
6.5
1%
Feb 17
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to the syslog.php
Affected: 2.65.0
CVE-2020-9029
6.5
1%
Feb 17
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to messagelog.php
Affected: 2.65.0
CVE-2020-9028
6.1
1%
Feb 17
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow stored XSS via the newUserName parameter on the "User Creation, Deletion…
Affected: 2.65.0
Showing 6