What’s Vulnerable › Vulnerabilities

CVE-2020-28993

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-12-01 · updated 2026-06-17
• Weakness: CWE-22

Description

A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. Successful exploitation of this vulnerability would allow an unauthenticated attacker to retrieve administrator credentials by sending a malicious POST request.

Affected products

• Atx Minicmts200A Firmware: through 2.0

References

• https://atx.com/products/commercial-services-gateways/minicmts200a-broadband-gateway/
• https://www.exploit-db.com/exploits/49124
• https://atx.com/products/commercial-services-gateways/minicmts200a-broadband-gateway/
• https://www.exploit-db.com/exploits/49124

Get alerted when CVE-2020-28993 or the next vulnerability affects your stack