Syncserver S100 Firmware

syncserver_s100_firmware

Vendor: Microchip • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-9033 1Microchip 5Syncserver S100 Firmware Syncserver S200 FirmwareSyncserver S250 Firmware+2 more Jun 17, 2026 Feb 17, 2020 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to authlog.php.
CVE-2020-9032 1Microchip 5Syncserver S100 Firmware Syncserver S200 FirmwareSyncserver S250 Firmware+2 more Jun 17, 2026 Feb 17, 2020 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to kernlog.php.
CVE-2020-9031 1Microchip 5Syncserver S100 Firmware Syncserver S200 FirmwareSyncserver S250 Firmware+2 more Jun 17, 2026 Feb 17, 2020 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to daemonlog.php.
CVE-2020-9030 1Microchip 5Syncserver S100 Firmware Syncserver S200 FirmwareSyncserver S250 Firmware+2 more Jun 17, 2026 Feb 17, 2020 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to the syslog.php.
CVE-2020-9029 1Microchip 5Syncserver S100 Firmware Syncserver S200 FirmwareSyncserver S250 Firmware+2 more Jun 17, 2026 Feb 17, 2020 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to messagelog.php.
CVE-2020-9028 1Microchip 5Syncserver S100 Firmware Syncserver S200 FirmwareSyncserver S250 Firmware+2 more Jun 17, 2026 Feb 17, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow stored XSS via the newUserName parameter on the "User Creation, Deletion and Password Maintenance" screen (when crea...Show more Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow stored XSS via the newUserName parameter on the "User Creation, Deletion and Password Maintenance" screen (when creating a new user).Show less
CVE-2020-9034 1Microchip 5Syncserver S100 Firmware Syncserver S200 FirmwareSyncserver S250 Firmware+2 more Jun 17, 2026 Feb 17, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices mishandle session validation, leading to unauthenticated creation, modification, or elimination of users.