VULNERABILITY INTELLIGENCE

CVE-2020-25353

CVSS score6.5 MEDIUM

EPSS probability0.99%

CISA KEVNot currently listed

Published2021-08-20

Last modified2026-06-17

Description

A server-side request forgery (SSRF) vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability allowed remote authenticated attackers to open a connection to the machine via the deviceIpAddr and connPort parameters.