CVE-2020-23161

Local file inclusion in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to traverse directories and read sensitive…

published January 22, 2021

CVSS
—
EPSS
2%
Percentile
84.0
In the wild
Unconfirmed
What it is

Local file inclusion in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to traverse directories and read sensitive files via the Maintenance > Logs menu and manipulating the file-path in the URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02414 · 84.0th percentile
Published
2021-01-22T13:11Z
EPSS history
Timeline
  • 22 JAN 13:11Z
    Local file inclusion in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to traverse directories and read sensitive…
    cvelistv5