CVE-2020-15809

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal

published March 24, 2021

CVSS
—
EPSS
1%
Percentile
61.6
In the wild
Unconfirmed
What it is

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00972 · 61.6th percentile
Published
2021-03-24T16:54Z
EPSS history
Timeline
  • 24 MAR 16:54Z
    spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal
    cvelistv5