CVE-2020-29026

CRITICAL
9.0CVSS v3
5.5CVSS v2
0.34% EPSS (exploit probability)
CWE-22CWE

Description

A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the Linux file system. This issue affects: GateManager all versions prior to 9.2c.

CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references