CVE:CVE-2020-15809
CNNVD:CNNVD-202103-1420
SpinetiX是德国SpinetiX公司的一个应用平台。提供解决方案套件。
SpinetiX devices 存在安全漏洞，该漏洞源于SSRF和路径遍历而访问非预期资源的请求。以下产品及版本受到影响：HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd。
solution:Upgrade spinetix dsos to a higher version than 4.5.2-1.0.2-1eb2ffbd,and avoid the version (,4.5.2-1.0.2-1eb2ffbd]; Upgrade spinetix hmp350_firmware to a higher version than 4.5.2-1.0.36229,and avoid the version (,4.5.2-1.0.36229]; Upgrade spinetix hmp300_firmware to a higher version than 4.5.2-1.0.36229,and avoid the version (,4.5.2-1.0.36229]; Upgrade spinetix diva_firmware to a higher version than 4.5.2-1.0.36229,and avoid the version (,4.5.2-1.0.36229]; Upgrade spinetix hmp400_firmware to a higher version than 4.5.2-1.0.2-1eb2ffbd,and avoid the version (,4.5.2-1.0.2-1eb2ffbd]; Upgrade spinetix hmp400w_firmware to a higher version than 4.5.2-1.0.2-1eb2ffbd,and avoid the version (,4.5.2-1.0.2-1eb2ffbd]