What is CVE-2020-22159?

CVE-2020-22159 is a high-severity vulnerability in Evertz 3080ipx, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 8.8/10. Published 2023-07-18.

How severe is CVE-2020-22159?

High severity. CVSS v3 base score is 8.8 out of 10.

Arbitrary file upload in Evertz 3080ipx

CVE-2020-22159

EVERTZ devices 3080IPX exe-guest-v1.2-r26125, 7801FC 1.3 Build 27, and 7890IXG V494 are vulnerable to Arbitrary File Upload, allowing an authenticated attacker to upload a webshell or overwrite any critical system files.

Vulnerability class: Unrestricted File Upload

Published 2023-07-18 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.010 (62.1th percentile), scored 2026-10-30.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 62nd percentile — 62.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.010 · newest: 0.010 · change: 0.000

Affected products

Evertz 3080ipx
Evertz 3080ipx Firmware — versions exe-guest-v1.2-r26125
Evertz 7801fc
Evertz 7801fc Firmware — versions 1.3
Evertz 7890ixg
Evertz 7890ixg Firmware — versions v494

Weakness classification (CWE)

CWE-434 — Unrestricted Upload of File with Dangerous Type

References

sku11army.blogspot.com/2020/02/evertz-path-transversal-arbitrary-file.html (Permissions Required)
cacharros-inthewild.blogspot.com/2023/07/the-3080ipx-is-integrated-multicast.ht… (Exploit)

Frequently asked questions

What is CVE-2020-22159?: CVE-2020-22159 is a high-severity vulnerability in Evertz 3080ipx, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 8.8/10. Published 2023-07-18.
How severe is CVE-2020-22159?: High severity. CVSS v3 base score is 8.8 out of 10.