CVE-2020-28993

A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. Successful exploitation of this vulnerability would allow an unauthenticated attacker to retrieve administrator credentials by sending a malicious POST request.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
VendorProductVersion
atxminicmts200a_firmware
𝑥
≤ 2.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://atx.com/products/commercial-services-gateways/minicmts200a-broadband-gateway/
https://www.exploit-db.com/exploits/49124
https://atx.com/products/commercial-services-gateways/minicmts200a-broadband-gateway/
https://www.exploit-db.com/exploits/49124