CVE-2020-29659: Flexense Dupscout

Critical severity, CVSS 9.8. EPSS: 5.3% chance of exploitation in the next 30 days.

A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= attack.

Affected products

• Flexense Dupscout: version 10.0.18 only

Published 2020-12-09. Last modified 2026-06-17.