CVE-2020-24548

PoC ×2—

CVSS 3.1

5.3 medium

EPSS

2%p76

Published

Aug 26, 2020 (Aug 26, 2020)

Modified

Jun 17, 2026

Description

Ericom Access Server 9.2.0 (for AccessNow and Ericom Blaze) allows SSRF to make outbound WebSocket connection requests on arbitrary TCP ports, and provides "Cannot connect to" error messages to inform the attacker about closed ports.

Vendors: ericom
Products: access server
Weakness: CWE-918
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.