Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-15643

59
FAUCET Score

CVE-2020-15643 is a critical path traversal vulnerability affecting Marvell QConvergeConsole 5.5.0.64, allowing remote attackers to execute arbitrary code with SYSTEM privileges. The flaw lies in the GWTTestServiceImpl's saveAsText method, which improperly validates user-supplied paths during file operations, and its authentication mechanism can be bypassed. With a CVSS score of 8.8 (HIGH), it presents a significant risk due to its low attack complexity and the potential for complete compromise of confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the high FAUCET Risk Score of 75/100 indicates its inherent danger.

Impacted Technologies

VendorProductVersion(s)CPE
< 5.5.00.73CPE matchmatch criteria
cpe:2.3:a:marvell:qconvergeconsole:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

8.8HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
2.8
Impact Score
5.9
CvssVersion
3.0

Exploit Intelligence

EPSS Score
59.35%
Probability of exploitation in next 30 days
EPSS Percentile
99.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.5935 is in the 99th percentile among its peer group of 17,822 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (7)

esetvendor investigatingvia llm_extracted
hyperledgervendor investigatingvia llm_extracted
mariadbvendor investigatingvia llm_extracted
omronvendor investigatingvia llm_extracted
openrefinevendor investigatingvia llm_extracted
pnpmvendor investigatingvia llm_extracted
twiliovendor investigatingvia llm_extracted

Vendor Advisories (7)

twiliollm-twilio-48778c9195ccdae5HIGH

Marvell QConvergeConsole GUI Multiple Vulnerabilities

Sep 25, 2020
esetllm-eset-99f752b63244fcbeHIGH

Marvell QConvergeConsole GUI Multiple Vulnerabilities

Sep 25, 2020
hyperledgerllm-hyperledger-56d3b31298d2c300HIGH

Marvell QConvergeConsole GUI Multiple Vulnerabilities

Sep 25, 2020
pnpmllm-pnpm-ae20a91471b3ce68HIGH

Marvell QConvergeConsole GUI Multiple Vulnerabilities

Sep 25, 2020
omronllm-omron-04c34563d49e25dfHIGH

Marvell QConvergeConsole GUI Multiple Vulnerabilities

Sep 25, 2020
openrefinellm-openrefine-b19ec3f98b70d28fHIGH

Marvell QConvergeConsole GUI Multiple Vulnerabilities

Sep 25, 2020
mariadbllm-mariadb-fd1924cd5fb7a485HIGH

Marvell QConvergeConsole GUI Multiple Vulnerabilities

Sep 25, 2020

References

marvell.com / content/dam/marvell/en/public-collateral/fibre-channel/marvell-fibre-channel-security-advisory-2020-07.pdf
Vendor Advisory
tenable.com / security/research/tra-2020-56
ExploitThird Party Advisory
zerodayinitiative.com / advisories/ZDI-20-971
Third Party AdvisoryVDB Entry