CVE-2020-15492

PoC ×2—

CVSS 3.1

9.8 critical

EPSS

17%p97

Published

Jul 23, 2020 (Jul 23, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804. The sut_srv.exe web application (served on TCP port 85) includes user input into a filesystem access without any further validation. This might allow an unauthenticated attacker to read files on the server via Directory Traversal, or possibly have unspecified other impact.

Vendors: inneo
Products: startup tools
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (16.6%)

In the news0 stories

No ingested article mentions this CVE yet.