CVE-2020-17383 - CVE House
Back to Database
Status published Critical CVE-2020-17383

A directory traversal vulnerability on Telos Z/IP One devices through...

Vulnerability Description

A directory traversal vulnerability on Telos Z/IP One devices through 4.0.0r grants an unauthenticated individual root level access to the device's file system. This can be used to identify configuration settings, password hashes for built-in accounts, and the cleartext password for remote configuration of the device through the WebUI.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-17383

Credits & Attribution

No credits recorded in the NVD database.

References

More from telosalliance

View All →
CVE-2022-45562
Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to...
Unknown 0
CVE-2022-43326
An Insecure Direct Object Reference (IDOR) vulnerability in the password...
Unknown 0
CVE-2022-43325
An unauthenticated command injection vulnerability in the product license validation...
Unknown 0
CVE-2022-36642
A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance...
Critical 9.8

Affected Vendor

telosalliance

View all reports →

Affected Software

z\/ip one firmware
Vulnerable Versions:
0

Timeline

Official Publish: January 24th, 2022
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.