Approved changes feed: RSS · Atom

cpe:2.3:a:secure_computing:snapgear_management_console_sg560:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSecure Computing (ab4261fc-812a-5dbf-99e6-d778175d507c)
ProductSnapgear Management Console Sg560 (0a4543ac-cae1-5397-b334-ff4fc70422ca)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36909 vulnerable 2026-06-08 05:25:49.811405 Secure Computing SnapGear Management Console SG560 3.1.5 Arbitrary File Read/Write
MEDIUM (6.5)
SnapGear Management Console SG560 3.1.5 contains a file manipulation vulnerability that allows authenticated users to read, write, and delete files using the edit_config_files CGI script. Attackers can manipulate POST request parameters in /cgi-bin/cgix/edit_config_files to access and modify files outside the intended /etc/config/ directory.
Published: 2026-01-06T15:52:22.155Z
Updated: 2026-07-15T01:24:18.736Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36908 vulnerable 2026-06-08 05:25:49.809557 Secure Computing SnapGear Management Console SG560 3.1.5 Cross-Site Request Forgery via Admin Users
MEDIUM (5.3)
SnapGear Management Console SG560 version 3.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft a malicious web page that automatically submits a form to create a new super user account with full administrative privileges when a logged-in user visits the page.
Published: 2026-01-06T15:52:21.719Z
Updated: 2026-07-15T01:24:18.038Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.