CVE-2020-36909
Secure Computing SnapGear Management Console SG560 3.1.5 Arbitrary File Read/Write
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
SnapGear Management Console SG560 3.1.5 contains a file manipulation vulnerability that allows authenticated users to read, write, and delete files using the edit_config_files CGI script. Attackers can manipulate POST request parameters in /cgi-bin/cgix/edit_config_files to access and modify files outside the intended /etc/config/ directory.
| CWE | CWE-22 |
| Vendor | secure computing |
| Product | snapgear management console sg560 |
| Published | Jan 6, 2026 |
| Last Updated | Jul 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for secure computing snapgear management console sg560
Be the first to know when new medium vulnerabilities affecting secure computing snapgear management console sg560 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
Secure Computing / SnapGear Management Console SG560
3.1.5
References
exploit-db.com: https://www.exploit-db.com/exploits/48556 zeroscience.mk: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5568.php packetstorm.news: https://packetstorm.news/files/id/157939 exchange.xforce.ibmcloud.com: https://exchange.xforce.ibmcloud.com/vulnerabilities/182960 vulncheck.com: https://www.vulncheck.com/advisories/secure-computing-snapgear-management-console-sg-arbitrary-file-readwrite
Credits
LiquidWorm as Gjoko Krstic of Zero Science Lab