Srimax vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Srimax products: 1 record(s), with severity, exploitation and fixes.

Output Messenger 1

Exploited only (KEV) →

CVE-2025-27920 High · 8.8 KEV High · 56 CWE-24 May 5, 2025

Srimax Output Messenger Directory Traversal Vulnerability

Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences in parameters, attackers could access sensitive files outside the intended directory, potentially leading to configuration leakage or arbitrary file access.