Approved changes feed: RSS · Atom

cpe:2.3:a:qsc:q-sys_core_manager:8.2.1:*:*:*:*:*:*:*

part: a version: 8.2.1 update: *

VendorQsc (b7c8348a-6ac1-5ca2-8927-4a94a7f24cf7)
ProductQ Sys Core Manager (251b8d4a-a9f5-5516-a802-9cd6d0695e6f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-24990 vulnerable 2026-06-08 05:22:35.790855 Details available
An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version.
Published: 2020-10-28T18:49:24.000Z
Updated: 2024-08-04T15:26:09.144Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.