CVE-2020-24548

Ericom Access Server 9.2.0 (for AccessNow and Ericom Blaze) allows SSRF to make outbound WebSocket connection requests on arbitrary TCP ports, and provides…

published August 26, 2020

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

Ericom Access Server 9.2.0 (for AccessNow and Ericom Blaze) allows SSRF to make outbound WebSocket connection requests on arbitrary TCP ports, and provides "Cannot connect to" error messages to inform the attacker about closed ports.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01689 · 76.9th percentile
Published
2020-08-26T18:28Z
EPSS history
Timeline
  • 26 AUG 18:28Z
    Ericom Access Server 9.2.0 (for AccessNow and Ericom Blaze) allows SSRF to make outbound WebSocket connection requests on arbitrary TCP ports, and provides…
    cvelistv5