← Back

CVE-2020-8009

nvd nist
Published: Jan 27, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

AVB MOTU devices through 2020-01-22 allow /.. Directory Traversal, as demonstrated by reading the /etc/passwd file.

Affected (1)

Products: Motu: Avb Firmware
Motu
1 product
Avb Firmware
Configuration A
1 vulnerable · 20 platform
Vulnerable SoftwareAffected Versions
Avb Firmware
Up to 2020-01-22
Running on/withPlatform Versions
Motu
112d
All versions
Motu
1248
All versions
Motu
16a
All versions
Motu
24ai
All versions
Motu
24ao
All versions
Motu
624
All versions
Motu
828es
All versions
Motu
828x
All versions
Motu
8a
All versions
Motu
8d
All versions
Motu
8m
All versions
Motu
8pre Es
All versions
Motu
Avb
All versions
Motu
Lp32
All versions
Motu
M64
All versions
Motu
Monitor 8
All versions
Motu
Moto Avb Switch
All versions
Motu
Stage B16
All versions
Motu
Ultralite Mk4
All versions
Motu
Ultralite Avb
All versions

Related CWEs

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (2)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.