CVE-2020-15809

Description

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd.

Related CPE's

ospinetixdsos********
vulnerable
ospinetixhmp350_firmware********
vulnerable
hspinetixhmp350-*******
ospinetixhmp300_firmware********
vulnerable
hspinetixhmp300-*******
ospinetixdiva_firmware********
vulnerable
hspinetixdiva-*******
ospinetixhmp400_firmware********
vulnerable
hspinetixhmp400-*******
ospinetixhmp400w_firmware********
vulnerable

References

https://support.spinetix.com/wiki/SpinetiX-SA-20:01

Release NotesVendor Advisory

https://support.spinetix.com/wiki/DSOS_release_notes

Release NotesVendor Advisory

CvssV3 impact

BaseSeverity

MEDIUM

ConfidentialityImpact

HIGH

AttackComplexity

LOW

Scope

UNCHANGED

AttackVector

NETWORK

AvailabilityImpact

NONE

IntegrityImpact

NONE

PrivilegesRequired

LOW

BaseScore

6.5

VectorString

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Version

3.1

UserInteraction

NONE

CvssV2 impact

AccessComplexity

LOW

ConfidentialityImpact

PARTIAL

AvailabilityImpact

NONE

IntegrityImpact

NONE

BaseScore

4

VectorString

AV:N/AC:L/Au:S/C:P/I:N/A:N

Version

2.0

AccessVector

NETWORK

Authentication

SINGLE