CVE-2014-5068: Microsemi s350i Firmware

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the web application in Symmetricom s350i 2.70.15 allows remote attackers to read arbitrary files via a (1) ../ (dot dot slash) or (2) ..\ (dot dot forward slash) before a file name.

Affected products

• Microsemi s350i Firmware: version 2.70.15 only

Published 2018-01-11. Last modified 2026-06-17.