https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-23162.htmlhttps://patchthecve.com/cve/CVE-2020-23162.htmlWed, 17 Jun 2026 03:04:33 +0000HIGH 7.5: Sensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices before 10.04k allows remote attackers to read a session-file and obtain plain-text user credentials.https://patchthecve.com/cve/CVE-2020-23161.htmlhttps://patchthecve.com/cve/CVE-2020-23161.htmlWed, 17 Jun 2026 03:04:33 +0000MEDIUM 6.5: Local file inclusion in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to traverse directories and read sensitive files via the Maintenance > Logs menu and manipulating the file-path in the URL.https://patchthecve.com/cve/CVE-2020-23160.htmlhttps://patchthecve.com/cve/CVE-2020-23160.htmlWed, 17 Jun 2026 03:04:33 +0000HIGH 8.8: Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to arbitrary commands as root on the devices.