CVE-2020-15809
24.03.2021, 17:15
spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd.
| Vendor | Product | Version |
|---|---|---|
| spinetix | dsos | 𝑥 ≤ 4.5.2-1.0.2-1eb2ffbd |
| spinetix | hmp350_firmware | 𝑥 ≤ 4.5.2-1.0.36229 |
| spinetix | hmp300_firmware | 𝑥 ≤ 4.5.2-1.0.36229 |
| spinetix | diva_firmware | 𝑥 ≤ 4.5.2-1.0.36229 |
| spinetix | hmp400_firmware | 𝑥 ≤ 4.5.2-1.0.2-1eb2ffbd |
| spinetix | hmp400w_firmware | 𝑥 ≤ 4.5.2-1.0.2-1eb2ffbd |
𝑥
= Vulnerable software versions